<?xml version="1.0" encoding="utf-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: SVN v. OSSEC</title>
	<atom:link href="http://www.ourada.org/blog/archives/188/feed" rel="self" type="application/rss+xml" />
	<link>http://www.ourada.org/blog/archives/188?&#038;owa_medium=feed&#038;owa_sid=</link>
	<description></description>
	<lastBuildDate>Thu, 26 Jan 2012 23:37:54 -0800</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Daniel Cid</title>
		<link>http://www.ourada.org/blog/archives/188/comment-page-1#comment-6361</link>
		<dc:creator>Daniel Cid</dc:creator>
		<pubDate>Mon, 09 Apr 2007 02:48:58 +0000</pubDate>
		<guid isPermaLink="false">http://www.ourada.org/blog/archives/188#comment-6361</guid>
		<description>Hi Steven,

You can create a local rule to resolve this issue. For example, to ignore this alert if the url is &quot;/svn/trunk/&quot; and the return code is 404, just add the following to local_rules.xml:


  31101
  ^404
  ^/svn/trunk
  Ignored 404 error codes for url svn/trunk


You can also use the &quot;srcip&quot; or &quot;username&quot; tags to refine it even further ...

*Some information regarding local rules: http://www.ossec.net/wiki/index.php/Know_How:Ignore_Rules</description>
		<content:encoded><![CDATA[<p>Hi Steven,</p>
<p>You can create a local rule to resolve this issue. For example, to ignore this alert if the url is &#8220;/svn/trunk/&#8221; and the return code is 404, just add the following to local_rules.xml:</p>
<p>  31101<br />
  ^404<br />
  ^/svn/trunk<br />
  Ignored 404 error codes for url svn/trunk</p>
<p>You can also use the &#8220;srcip&#8221; or &#8220;username&#8221; tags to refine it even further &#8230;</p>
<p>*Some information regarding local rules: <a href="http://www.ossec.net/wiki/index.php/Know_How:Ignore_Rules" rel="nofollow">http://www.ossec.net/wiki/index.php/Know_How:Ignore_Rules</a></p>
]]></content:encoded>
	</item>
</channel>
</rss>

