Hello Jester
Let's see if we can get you back on the road.
You are missing an rpm (it is missing from the distro). You can get it here
http://sailpbx.com/sail/sail-3.1/perl-IO-Socket-Multicast-1.12-1.rhel5.i386.rpmThe second issue is OSSEC complaining about the length of log message that one of your applications is writing. Looks like maybe a webmail app perhaps? As long as you are happy that the message is valid you can ignore it, turn off that message in OSSEC or change the maximum length in the rule. You can find the rule in
/var/ossec/rules/syslog_rules.xml. Here is what it says
<rule id="1003" level="13" maxsize="1025">
<description>Non standard syslog message (size too large).</description>
</rule>If you change it, you'll need to bounce ossec or the box. As an aside; are you sure that OSSEC is locking you out? Do you see your IP being dropped when you do
iptables -L ?
Lastly, I have no idea what the locale message is but there are other posts about that message which reference the zarafa contrib.
Kind Regards
S
3 Replies
1586 Views