LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices



Reply
 
Search this Thread
Old 07-15-2012, 06:08 AM   #1
glennbtn
Member
 
Registered: Dec 2009
Posts: 89

Rep: Reputation: 18
Ossec error


Hi All

I have built a new Ubuntu 10.4 server this weekend to host my Zimbra server on so have setup split DNS.

From what I can tell, it's all fine. I can do an nslook up and get results. Can send and receive emails but keep getting wierd ossec messages like below which has nothing to do with email we send. Hoping someone can advise.

OSSEC HIDS Notification.
2012 Jul 15 10:57:01

Received From: mail->/var/log/syslog
Rule: 1002 fired (level 2) -> "Unknown problem somewhere in the system."
Portion of the log(s):

Jul 15 10:56:59 mail named[810]: error (network unreachable) resolving '200.94.150.192.zen.spamhaus.org/A/IN': 2001:7b8:3:1f:0:2:53:2#53


Thanks

Glenn
 
Old 07-15-2012, 08:07 AM   #2
glennbtn
Member
 
Registered: Dec 2009
Posts: 89

Original Poster
Rep: Reputation: 18
Found the resolution

Add -4 to the bind command line to disable this.
OPTIONS="-u bind -4"

into /etc/default/bind9,
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
OSSEC WUI problem...need help andrapgm03 Linux - Software 3 11-28-2014 12:26 PM
custom rules in OSSEC 2.6 vikas027 Linux - Software 3 07-13-2012 11:01 AM
Regding OSSEC vamsi_k Linux - Software 0 05-04-2012 05:38 AM
ossec Issue glennbtn Linux - Software 2 07-29-2010 10:06 AM
OSSEC report - is this OKAy? Old_Fogie Linux - Security 7 10-23-2006 07:03 AM


All times are GMT -5. The time now is 11:34 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration