Not sure if this made the list first time around. :-0 ---------- Forwarded message ---------- Thanks to a great idea from Charlie Reitsma I've updated the FW-1 alert.sh script (Probe detection). The new version 1.4.4 now limits the TOTAL number of emails you can get in a day. Older versions limited the number of alerts you could get from a single source probing you. However, in certain attacks/probes, the source could be spoofed and constantly changing, resulting in thousands of alerts (and emails). This new version will protect you by limiting the TOTAL number of emails you can receive in a day (default is 500). You can set this number to whatever you want. As always, FW-1 Intrusion Detection script http://www.enteract.com/~lspitz/intrusion.html Thanks! lance ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
