|
Hey everyone,
I've just implemented Nagios, monitoring ~60 windows hosts/servers combined and am using EventLog Agent. I would just like to congratulate Steve for creating some real great software!
Now I have an issue, I'm trying to monitor incoming connections to my windows terminal server and get alerts when someone connects that is outside our LAN. The event viewer logs the IP address in its info.
The problem is we have two LAN's, one starting with 128, and the other 192. So I've created two filters.. the first one as the match rule I put NOT to match the string 128 and the second filter as the match rule i put NOT match 192 But I'm still getting alerts for BOTH because when someone connects from 128 the 192 filter catches it and alerts me, and vice versa for the other.
Is there another way to do this?
|