Send postings to: [EMAIL PROTECTED]
----------------------------------
Mark,
The GNAT Box has an implicit rule that says everthing that is not
explicitly allow is denied. Since the default logging action is to log
everything that is rejected, scans show up in the log. But email alarms
are different, you need to explicitly set them.
To do this add a remote access filter at the very end of the filter set.
It should be a deny all like this:
My email alarm filter
Deny ANY ALL action:email
from: 0.0.0.0/0.0.0.0
to: 0.0.0.0/0.0.0.0
You can modify this one to only address packets arriving on the EXT nic or
even narrow it to a single IP address on the EXT nic if you have aliases.
In version 2.2 (yes is will be out soon) alarms are much more flexible and
offer much greater control.
Paul
>Send postings to: [EMAIL PROTECTED]
>----------------------------------
>I can't for the life of me get the E-Mail alarm to work. I have the email
>server set, The to: is a valid user on the smtp server, I have E-mail proxy
>enabled and get E-mail through that fine from outside the external network.
>I can even set a filter to E-mail on match and that works fine I have the
>default filters for the settings that it generated it's self. Under Filter
>preferences I have all selected except stealth mode. If the box gets
>scanned though nothing gets mailed. I do get filter blocked messages through
>syslog server but no e-mail alarm. I tried everything I can think of. Has
>anyone else been able to get this to work? I even can get "possible spoof"
>messages from syslog server but no alarm from e-mail.
>
>
>Mark Murphy
>Client Support/TFS
>EDS @ GM R&D Center
>[EMAIL PROTECTED]
>
>----------------------------------------------
>To Unsubscribe: send mail to [EMAIL PROTECTED]
>with "unsubscribe gb-users your_email_address
>in the body of the message
-------------------------------------------------------------------------
Paul Emerson Tel: +1.407.380.0220 x106
Global Technology Associates, Inc. Fax: +1.407.380.6080
3505 Lake Lynda Drive Mobile: +1.407.497.3379
Suite 109 Pager: +1.888.440.8232
Orlando, Florida 32817 Email: [EMAIL PROTECTED]
USA Mobile Email: [EMAIL PROTECTED]
Web: http://www.gta.com
-------------------------------------------------------------------------
----------------------------------------------
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe gb-users your_email_address
in the body of the message
