Michael Leone on Tue, 6 Mar 2001 21:36:34 -0500 |
On 06 Mar 2001 16:34:26 -0500, MaD dUCK wrote: > also sprach Michael Leone (on Tue, 06 Mar 2001 04:36:16PM -0500): > > No; posrtsentry monitors for port scans. If it sees one, it drops the route > > back to that host. Effectively black-holing all further communications from > > the scanning host. Bad for @Home people, since @Home has a stated policy of > > scanning your host every so often, looking for illegal services. > > ooooooh. nice. is this black-holing permanent or only for like 3 hours > or configurable or what? The offending IP is put into a portsentry.blocked file. AFAIK, the file stays there, until you remove it (i.e., it is not cleared when the program first loads up). You can also add hosts that are always ignored when scanning (such as the @Home scanners mentioned above). Nice program. > > martin > > [greetings from the heart of the sun]# echo madduck@ !#:1:s@\@@@.net > -- > echo Prpv a\'rfg cnf har cvcr | tr Pacfghnrvp Cnpstuaeic > > > ______________________________________________________________________ > Philadelphia Linux Users Group - http://www.phillylinux.org > Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce > General Discussion - http://lists.phillylinux.org/mail/listinfo/plug > > -- ------------------------------------------------------------------ Michael J. Leone Registered Linux user #201348 <mailto:turgon@mike-leone.com> ICQ: 50453890 PGP Fingerprint: 0AA8 DC47 CB63 AE3F C739 6BF9 9AB4 1EF6 5AA5 BCDF You've got your glory, you've paid for it all You take your pension in loneliness and alcohol Billy Squier, "Everybody wants you" ______________________________________________________________________ Philadelphia Linux Users Group - http://www.phillylinux.org Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce General Discussion - http://lists.phillylinux.org/mail/listinfo/plug
|
|