Re: How would I do this? (expert tricks) OT

2007-06-27 Thread Bill Davidsen
Marc Perkel wrote: I have a server with port 25 closed. I was to be able to run a script every time someone tries to connect to port 25, but from the outside the port remains closed. I need the script that I'm going to run get the IP address that tried to connect. I know it's off topic but it's

Re: How would I do this? (expert tricks) OT

2007-06-19 Thread Marc Perkel
--- Jan Engelhardt <[EMAIL PROTECTED]> wrote: > > On Jun 19 2007 10:14, Marc Perkel wrote: > >> > >> tcpdump -lni any port 25 > >> iptables -p tcp --dport 25 -j NFQUEUE > >> ... > >> > > > >Thanks Jan, but I'm not sure it answers my > question. > > There's more than one way to do it. > > One

Re: How would I do this? (expert tricks) OT

2007-06-19 Thread Jan Engelhardt
On Jun 19 2007 12:36, Marc Perkel wrote: > >Thanks Jan, > >I think what you sent me is workable. I noticed it >goes to the file /var/log/messages. Is there a way to >make it go to a specific file? Configure your syslog daemon accordingly. > Thanks a lot for your >help. I've been experimenting w

Re: How would I do this? (expert tricks) OT

2007-06-19 Thread Jan Engelhardt
On Jun 19 2007 10:14, Marc Perkel wrote: >> >> tcpdump -lni any port 25 >> iptables -p tcp --dport 25 -j NFQUEUE >> ... >> > >Thanks Jan, but I'm not sure it answers my question. There's more than one way to do it. One is... tcpdump -lni eth0 tcp [extra operands to match SYN packets] |

Re: How would I do this? (expert tricks) OT

2007-06-19 Thread Marc Perkel
--- Jan Engelhardt <[EMAIL PROTECTED]> wrote: > > On Jun 19 2007 09:48, Marc Perkel wrote: > > > >I have a server with port 25 closed. I was to be > able > >to run a script every time someone tries to connect > to > >port 25, but from the outside the port remains > closed. > >I need the script t

Re: How would I do this? (expert tricks) OT

2007-06-19 Thread Jan Engelhardt
On Jun 19 2007 09:48, Marc Perkel wrote: > >I have a server with port 25 closed. I was to be able >to run a script every time someone tries to connect to >port 25, but from the outside the port remains closed. >I need the script that I'm going to run get the IP >address that tried to connect. > >I

How would I do this? (expert tricks) OT

2007-06-19 Thread Marc Perkel
I have a server with port 25 closed. I was to be able to run a script every time someone tries to connect to port 25, but from the outside the port remains closed. I need the script that I'm going to run get the IP address that tried to connect. I know it's off topic but it's part of an experiment