On Mon, 31 Jan 2000, Mike Lewis wrote:
> Do I understand correctly, that the ipchains script from
> (http://ipchains.nerdherd.org/) does exactly the same thing as
> Portsentry does, except the ipchains script does the
> redirection/denial "up front" where the Portsentry s/w does the
> redirection/denial "in real time" ?
Pretty much.
They work best in combination. Use ipchains to block most access, but
leave a few ports (say, SNMP and 31337) open as honeypots, and set
portsentry up listening to them.
--
John Hardin KA7OHZ ICQ#15735746 http://www.wolfenet.com/~jhardin/
[EMAIL PROTECTED] pgpk -a finger://gonzo.wolfenet.com/jhardin
768: 0x41EA94F5 - A3 0C 5B C2 EF 0D 2C E5 E9 BF C8 33 A7 A9 CE 76
1024: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
62 days until Daylight Savings Time begins
--
To unsubscribe: mail [EMAIL PROTECTED] with "unsubscribe"
as the Subject.
