Re: OT: An Idea for an IDS
On Tue, Jul 01, 2003 at 05:57:27PM +0200, Tomasz Papszun wrote:
> On Mon, 30 Jun 2003 at 22:39:15 -0400, Matt Zimmerman wrote:
> > Not really a good idea. Consider what happens when someone forges the IP
> > addresses.
>
> One can predefine trusted or other very important IP addresses which
> cannot be blocked.
> In fact, such an utility exists and is present in Debian Woody:
> fwlogwatch.
Which ones are important? For example, one could forge packets from
millions of random IP addresses, popular web sites, etc. and easily DoS such
a system.
--
- mdz
Reply to: