Hi,

This may be the wrong place to post this but I didn't see a tcpserver/ucspi-tcp list. 
If there's a better place to post please let me know and forgive.

I'm wondering if and how you can booby trap a tcprules deny rule like you can with 
tcpd. With tcpd for instance you can have hosts.allow allow what you want then 
hosts.deny has a rule:

ALL: ALL: spawn (echo Attempt from %h %a to %d at `date` | tee -a 
/usr/adm/tcp.deny.log | mail -s "NETWORK DENY--myserver" [EMAIL PROTECTED]) &

which lets me know immediately if someone has tried something naughty. From the docs I 
get the impression it can be done but I'm pretty stupid and can't figure out how.

TIA

Bill

Reply via email to