[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [hobbit] Looking for sample BBWIN configs for filtering Windows event logs
- To: hobbit (at) hswn.dk
- Subject: Re: [hobbit] Looking for sample BBWIN configs for filtering Windows event logs
- From: "Bob Gordon" <rgordonjr (at) gmail.com>
- Date: Thu, 9 Oct 2008 15:55:25 -0700
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from:to :subject:in-reply-to:mime-version:content-type:references; bh=1wUWnNBa/bdYTbbhngvVDkP8Ni1/FG4RI2EhgBgsuWg=; b=o1YTnPRJqpuOOkXcrLR1/luhspD/z7z5lyGXKUAwFpoMRAK/3gujDJvU+JIosI723D KQv3iSuw0rnHP/b0K53RNJAFInk3rjdqGhQbS9GO9DlBCZPvFx+Dc37ZkMD3v4SioPnS LiRQotTONoSv223RbT1n2OdQAkuQBZpHa85Es=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:to:subject:in-reply-to:mime-version :content-type:references; b=T4zhzH6ZT73l1xG5BK5fn1MqpbnhNXPFLMrWzj39ZxzLFKi/CbZe795KG7RKTLWInv bNLH7NKNTKEwexFrSsgHICMCeWADdciAQqPV0zOdp404pIkQU2ov5sH5eoMx18+crnof szqYWPV/eGe+4GrqxxFUBrmc0ztN6roeImfZw=
- References: <d4f70c240810091212pd8290b5le3f9d3ac0323729b (at) mail.gmail.com> <C513E60C.C0D9%rmcgraw (at) purdue.edu>
On Thu, Oct 9, 2008 at 1:47 PM, McGraw, Robert P <rmcgraw (at) purdue.edu> wrote:
> Bob,
>
> FWIW.
>
> In server/etc/hobbit-clients.cfg file the last few lines of the comments at
> the top says
>
> # The special DEFAULT section can modify the built-in defaults - this
> must
> # be placed at the end of the file.
>
>
Thanks for pointing that out (wonder when it changed).. The config file I
have has been used since the first 4.x version when it finished with:
# Rules are evaluated from the top of this file and down, and the first
# matching rule is used. So you should put the specific rules first, and
# the generic rules last.
#
# EXHOST=%^pto\.linuxbog\.dk|\.sslug\.dk|^bb-mws.csc.dk|sarge|trantor|postcode
EXSERVICE=dnsinfo,dnsreg
#
So far it seems to be working but I will go through and double check to make
sure it actually is... ;)
--
--==[ Bob Gordon ]==--