portsentry

Quick question... What's the best way to start portsentry on reboot? Many thanks, phillip. To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-questions" in the body of the message

portsentry question.

Hello Everyone, I have up and running freebsd 4.8-R recently i installed portsentry from my updated ports, I configured portsentry.conf to add the blocked IPs to ipfw. also I added all my allowed IPs to portsentry.ignore when I ssh to the box It works fine, but when I surf the web

portsentry KILL_RUN_CMD

hi all i'm configuring portsentry and i wanted to set the value of the KILL_RUN_CMD option to reverse finger a scanning host. can somebody tell me what the correct syntax this would be in this file? thanks msg12345/pgp0.pgp Description: PGP signature

Re: portsentry

Hi, On Wed, 2003-01-29 at 19:03, Phillip Smith wrote: > Quick question... > > What's the best way to start portsentry on reboot? > > Many thanks, > You can write a simple start-up script that does that for you. Here's what I have in /usr/local/etc/rc.d: #!/bin/sh

Re: portsentry

Hi Phillip. On Wed, Jan 29, 2003 at 02:03:03PM -0500, Phillip Smith wrote: > > What's the best way to start portsentry on reboot? There doesn't seem to be one build by the port, so I wrote a /usr/local/etc/rc.d/portsentry.sh that looks someting like this: #!/bin/sh ca

Re: portsentry

Wednesday, January 29, 2003, 2:03:03 PM, you wrote: PS> Quick question... PS> What's the best way to start portsentry on reboot? PS> Many thanks, PS> phillip. I use a script in /usr/local/etc/rc.d -- Benmailto:[EMAIL PROTECTED] To Unsubscr

portsentry - flushing hosts.deny

FreeBSD 4.8 - stable can somebody tell me how to get portsentry to flush the hosts.deny file? or do I just need to remove the contents manually and restart portsentry? thanks in advance, - Noah ___ [EMAIL PROTECTED] mailing list http

Re: portsentry - flushing hosts.deny

On Mon, Sep 29, 2003 at 08:10:22AM -0800, Noah wrote: > > FreeBSD 4.8 - stable > > > can somebody tell me how to get portsentry to flush the hosts.deny file? or > do I just need to remove the contents manually and restart portsentry? You don't need to do that for two re

portsentry core dumps on 5.2.1

Hello, Is anyone noticing an issue when portsentry is started on 5.2.1-p8 it atempts to bind to a tcp or udp port the first one listed in the portsentry.conf file and immediately core dumps with a signal 4? I have tried this on two machines with identical results. Suggestions welcome. Thanks

portsentry in combination with ipfilter

, but they're long, and suffice it to say ports i thought were closed or inactive were shown as open. after discussing it with the -security listserv, and running a 'sockstat' on the gateway box, it turns out that portsentry was indeed listening on the great majority of ports tha

Re: portsentry in combination with ipfilter

> and udp ports were open. i could copy the nmap results, but they're > long, and suffice it to say ports i thought were closed or inactive > were shown as open. > > after discussing it with the -security listserv, and running a > 'sockstat' on the gateway box, it tu

Re: portsentry in combination with ipfilter

hi i've used portsentry on standalone workstations before with ipfilter setup as a +firewall, and for some reason, now when i'm trying to use it on a ipf/ipnat +gateway box, it's being really verbose about the ports it's binding to. if i +nmap a standalone workstation i have

Re: portsentry in combination with ipfilter

> hi > i've used portsentry on standalone workstations before with ipfilter > setup as a +firewall, and for some reason, now when i'm trying to use it > on a ipf/ipnat +gateway box, it's being really verbose about the ports > it's binding to. if i +nmap a stand

Re: portsentry in combination with ipfilter

On Tue, 11 Feb 2003 23:05:09 -0600 Redmond Militante <[EMAIL PROTECTED]> wrote: > hi > i've used portsentry on standalone workstations before with ipfilter setup as a > +firewall, and for some reason, now when i'm trying to use it on a ipf/ipnat > +gateway box, it'

Re: portsentry in combination with ipfilter

hi thanks again. i think i'm going to move portsentry to hosts behind the gateway - makes more sense considering the info you sent, and then look into snort/tripwire on the gateway (i actually have tripwire installed, i just haven't generated a new config db lately, since i'

Re: portsentry in combination with ipfilter

On Wed, 2003-02-12 at 05:55, Stephen Hilton wrote: > What bothers me about this method of defense is the possibilty > of an attacker causing a DOS by spoofing their source scan IP > and causing your system to deny traffic from a vaild host like > your upstream DNS server. You can add your DNS