Re: Logging atempts

[Frank Copeland <fjc@wossname.apana.org.au>]

Mario wrote:
>balexander@sonsofthunder.yi.org wrote:

>> This will send you an email whenever someone gets through to
>> tco_wrappers.
>
>Please consider the side effects of this: a simple DOS would
>be generating a huge amount of TCP requests towards this machine
>forcing the system to send an email every time. Sometimes it
>can make the target unusable...

fjc@wossname:~$ apt-cache show logcheck
Package: logcheck
Version: 1.1.1-6
Priority: optional
Section: admin
Maintainer: Rene Mayrhofer <rmayr@vianova.at>
Depends: libc6 (>= 2.1.2), debconf, mail-transport-agent, cron, sysklogd, mailx
Suggests: syslog-ng
Architecture: i386
Filename: dists/woody/main/binary-i386/admin/logcheck_1.1.1-6.deb
Size: 30082
MD5sum: ed54827f3778b26efb9dfe1c5c550af4
Description: Mails anomalies in the system logfiles to the administrator
 Logcheck is part of the Abacus Project of security tools. It is a program
 created to help in the processing of UNIX system logfiles generated by the
 various Abacus Project tools, system daemons, Wietse Venema's TCP Wrapper
 and Log Daemon packages, and the Firewall Toolkit by Trusted Information
 Systems Inc.(TIS).
 .
 Logcheck helps spot problems and security violations in your logfiles
 automatically and will send the results to you in e-mail. This program is
 free to use at any site. Please read the disclaimer before you use any of
 this software.
installed-size: 196

Frank