NodeBB 1.13.3 - OSSEC issue

[iclou]

I use NodeBB 1.13.3 on Ubuntu 18.04 where OSSEC is also installed on.

While using NodeBB, after some clicks I get the following message from OSSEC:

"High amount of POST requests in a small period of time (likely bot)."

Then my IP address gets blocked

If I stop ossec, then all works fine.

Any idea how to resolve this - much appreciated !

[iclou]

I have resolved this issue by adding the following rule to local_rules.xml.

<rule id="100014" level="0">
<if_sid>31533</if_sid>
<url>^/socket.io/</url>
<description>Ignoring NodeBB (socket.io).</description>
</rule>