Re: Intrusion Attempts
On Tue, 10 Dec 2002 at 10:24:08AM -0300, Ariel Graneros wrote:
> A good solution is portsentry:
> PortSentry is part of the TriSentry suite of security tools. It is a program designed to detect and respond to port scans against a target host in real-time. Stealth detection modes are available under all Unix platforms and detects SYN, FIN, NULL, XMAS, and Oddball packet scans. All modes support real-time blocking and reporting of violations.
I wasn't turned on to port sentry b/c it involved me opening a bunch of
ports...which didn't really make sense to me. Strike me dead and flame
me but I'll stand by snort.
wget -O - http://www.zionlth.org/~plhofmei/key.txt | gpg --import
Excuse #140: Pseudo-user on a pseudo-terminal