Re: Secure remote syslogging?
On Tue, Apr 29, 2003 at 10:54:51PM +1000, Sam Couter wrote:
> Stefan Neufeind <stefan@neufeind.net> wrote:
> > what is the best way to remotely syslog? In
>
> Use a dedicated machine. Cut the 'transmit' pair in the CAT5 cable.
> syslog is UDP, which is only one-way, so it doesn't need to transmit.
>
> Obviously you'll have no remote access to the syslog server, but neither
> will an attacker.
That solution seems rather harsh. Another way (without syslog, granted)
would be setting up a dedicated machine to do stealth logging. Somewhat
less intense on the hardware penetration part ;)
Regs,
Sven
--
Sven Riedel sr@gimp.org
Osteroeder Str. 6 / App. 13 sven.riedel@tu-clausthal.de
38678 Clausthal "Python is merely Perl for those who
prefer Pascal to C" (anon)
Reply to: