
	location /ossec {
		root /opt/local/www;
		index index.php;
	        location ~ \.php$ {
	            fastcgi_pass   unix:/tmp/php.sock;
	            fastcgi_index  index.php;
	            include        fastcgi_params;
	        }
        	location ~ /\.ht {
     	   	    deny  all;
        	}
        	location ~ /\.sh {
     	   	    deny  all;
        	}
        	location ~ ossec_conf.php {
     	   	    deny  all;
        	}
        	location ~ /(site|tmp|lib) {
     	   	    deny  all;
        	}
	}
