@talsoft one final question! Will an IP address that is already referenced in iptables be added to the Cloudflare list? And how does it react if the IP address is referenced in the manager's "ossec.conf" whitelist?
Sorry for all these questions but how Wazuh works seems unclear to me sometimes! 😄
mm, great question. According with the documentation, and the theory, the Whitelist has priority with Ban ip . But if that IP address is added in Cloudflare, the request never is received by wazuh. mmmm Interesting situation. Maybe, we need to read the whitelist of the manager before send the ip to blacklist in the Cloudflare.
Originally posted by @talsoft in #1
Originally posted by @talsoft in #1