[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Logging atempts



On Mon, Jul 17, 2000 at 01:41:46AM +0200, A. Vije wrote:
> On Sun, 16 Jul 2000, Patrick Barr wrote:
> 
> > What I want to do, is run a programme that will monitor my ppp0 
> > connection for any attempts from anyone to connect to a port and FAIL. 
> > I am running 2.4.0 test2 (but I will soon move back to 2.2.16 when 
> > potato comes out) and I dont have netfilter on, I just have hosts.deny 
> > set to all:all.
> 
> You can just cat (or tail -f for realtime stats) your syslog (tail -f
> /var/log/syslog) for as for as i know all attempts get logged there.

afaik you need the iplogger package installed,
including tcplogd and icmplogd, doing exactly what their names sound like.

for 2.2.x kernels 'ipchains -I input 1 -i ppp0 -l -y -p tcp' 
will log all incoming tcp connection attempts through ppp0.
--> 'man ipchains', for further details

> Small note Potato ships with 2.2.17pre6. (i`m looking forward to it .. :)

I have it already running for one month - imho pretty stable :)

c'ya
flo

-- 
     Florian Friesdorf <42ff@gmx.net>
OpenPGP key available on public key servers

------> Save the future of Open Source <------
-> Online-Petition against Software Patents <-
------> http://petition.eurolinux.org <-------

Attachment: pgpCZlQXqVXM1.pgp
Description: PGP signature


Reply to: