Re: scan

2003-04-12 Thread Tore Nilsson
Hi! I'm not advanced enough to give an educated answer - but I noticed that you had sent a post a week or two earlier about a possible attack, and I'm wondering if this is the same server? //Tore Nilsson - Original Message - From: "danilo lujambio" <[EMAI

Re: IPTables configuration.

2002-12-04 Thread Tore Nilsson
I see why I should set the "--state NEW" flag on port 80. Would I be sure that it wouldn't hamper the webserver though? And if I'd like to block an IP out of the system, how would that be done the easiest way? Put a rule in PAROLE? //Tore Nilsson - Original Message -

Re: IPTables configuration.

2002-12-04 Thread Tore Nilsson
/sbin/iptables -L [-n]" is not sufficient to me, cause it won't > reveal the per interface filters. > > Vincent > > > > > > -Original Message- > > From: Tore Nilsson [mailto:[EMAIL PROTECTED] > > Sent: Wednesday 4 December 2002 14:23 > &g

Re: IPTables configuration.

2002-12-04 Thread Tore Nilsson
I see why I should set the "--state NEW" flag on port 80. Would I be sure that it wouldn't hamper the webserver though? And if I'd like to block an IP out of the system, how would that be done the easiest way? Put a rule in PAROLE? //Tore Nilsson - Original Message -

IPTables configuration.

2002-12-04 Thread Tore Nilsson
Hello! Can someone review my iptables configuration and give suggestions? Btw. if I'd want to block someone completely using this configuration should I put them in "Parole" by using this command: iptables -A PAROLE -s [ip-number] -j DROP //Tore Nilsson here's my config

Re: IPTables configuration.

2002-12-04 Thread Tore Nilsson
bles -L -n -v" > The mere "/sbin/iptables -L [-n]" is not sufficient to me, cause it won't > reveal the per interface filters. > > Vincent > > > > > > -Original Message- > > From: Tore Nilsson [mailto:[EMAIL PROTECTED]] > > Sent: Wednesday 4

IPTables configuration.

2002-12-04 Thread Tore Nilsson
Hello! Can someone review my iptables configuration and give suggestions? Btw. if I'd want to block someone completely using this configuration should I put them in "Parole" by using this command: iptables -A PAROLE -s [ip-number] -j DROP //Tore Nilsson here's my config

Re: snort: WARNING: Bad insert in fraglist for FragTracker 0x8511388

2002-11-24 Thread Tore Nilsson
ot;WARNING: Fraglist" message... //Tore Nilsson >On Sat, 23 Nov 2002 at 02:11:00PM +0100, Tore Nilsson wrote: >> Hello! >Greets. >> Got this message sent to me by email from logcheck: >> snort: WARNING: Bad insert in fraglist for FragTracker 0x8511388 >Not a clue...so

Re: snort: WARNING: Bad insert in fraglist for FragTracker 0x8511388

2002-11-24 Thread Tore Nilsson
ot;WARNING: Fraglist" message... //Tore Nilsson >On Sat, 23 Nov 2002 at 02:11:00PM +0100, Tore Nilsson wrote: >> Hello! >Greets. >> Got this message sent to me by email from logcheck: >> snort: WARNING: Bad insert in fraglist for FragTracker 0x8511388 >Not a clue...so

snort: WARNING: Bad insert in fraglist for FragTracker 0x8511388

2002-11-23 Thread Tore Nilsson
SPT=3000 DPT=21 WINDOW=32767 RES=0x00 SYN URGP=0 //Tore Nilsson

snort: WARNING: Bad insert in fraglist for FragTracker 0x8511388

2002-11-23 Thread Tore Nilsson
SPT=3000 DPT=21 WINDOW=32767 RES=0x00 SYN URGP=0 //Tore Nilsson -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bastille...

2002-11-15 Thread Tore Nilsson
Hi! Bastille is not working out quite properly for me. It seems as if it doesn't perform all of the actions that I've told it to do when I run 'InteractiveBastille'. Running BastilleBackEnd (with the configuration I've setup) I get this: Executing PSAD Specific Configuration Can't locate Bastille

Bastille...

2002-11-15 Thread Tore Nilsson
Hi!   Bastille is not working out quite properly for me. It seems as if it doesn't perform all of the actions that I've told it to do when I run 'InteractiveBastille'.   Running BastilleBackEnd (with the configuration I've setup) I get this: Executing PSAD Specific ConfigurationCan't locate

Bastille...

2002-11-15 Thread Tore Nilsson
Hi! Bastille is not working out quite properly for me. It seems as if it doesn't perform all of the actions that I've told it to do when I run 'InteractiveBastille'. Running BastilleBackEnd (with the configuration I've setup) I get this: Executing PSAD Specific Configuration Can't locate Bastille

Bastille...

2002-11-15 Thread Tore Nilsson
Hi!   Bastille is not working out quite properly for me. It seems as if it doesn't perform all of the actions that I've told it to do when I run 'InteractiveBastille'.   Running BastilleBackEnd (with the configuration I've setup) I get this: Executing PSAD Specific ConfigurationCan't locate