-<!-- @(#) $Id: named_rules.xml,v 1.21 2009/06/24 17:06:19 dcid Exp $
+<!-- @(#) $Id$
- Example of Named rules for OSSEC.
-
- Copyright (C) 2009 Trend Micro Inc.
-
- This program is a free software; you can redistribute it
- and/or modify it under the terms of the GNU General Public
- - License (version 3) as published by the FSF - Free Software
+ - License (version 2) as published by the FSF - Free Software
- Foundation.
-
- License details: http://www.ossec.net/en/licensing.html
<match>denied update from|unapproved update from</match>
<description>DNS update denied. </description>
<description>Generally mis-configuration.</description>
- <info>http://seclists.org/lists/incidents/2000/May/0217.html</info>
+ <info type="link">http://seclists.org/incidents/2000/May/217</info>
<group>client_misconfig,</group>
</rule>
<if_sid>12100</if_sid>
<regex>update \S+ denied</regex>
<description>DNS update using RFC2136 Dynamic protocol.</description>
- <info>http://www.isc.org/index.pl?/sw/bind/FAQ.php</info>
+ <!-- <info>http://www.isc.org/index.pl?/sw/bind/FAQ.php</info> dead link, and don't know what the issue is with this -->
</rule>
<rule id="12108" level="4">
<if_sid>12100</if_sid>
<match>query (cache) denied</match>
<description>Query cache denied (maybe config error).</description>
- <info>http://www.reedmedia.net/misc/dns/errors.html</info>
+ <info type="link">http://www.reedmedia.net/misc/dns/errors.html</info>
</rule>
<rule id="12109" level="12">