-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 The only application I know of that does anything like this is Portsentry. Available from: http://www.psionic.com/abacus/portsentry/
Although not a real IDS, it listens for connections to ports that have been set up as a sort-of honeypot, and adds the attacker into the "dropped route" category. Portsentry does not do the actual reverse attack, but you would need to come up with an application that can do it (I can think of many). Chip - ----- Chip McClure Sr. Unix Administrator GigGuardian, Inc. http://www.gigguardian.com/ - ----- On Tue, 5 Mar 2002, Ralph Los wrote: > I can't speak for too many options - but Secure Computing has a product that > USED to do that, until it became illegal. (If I'm not mistaken, and I might > be, SideWinder did something of the nature, or maybe the complemenatry IDS?) > > Cheers, > > ----------------------------------------| > Ralph M. Los > Sr. Security Consultant and Trainer > EnterEdge Technology, L.L.C. > [EMAIL PROTECTED] > (770) 955-9899 x.206 > ----------------------------------------| > > ::-----Original Message----- > ::From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] > ::Sent: Tuesday, March 05, 2002 12:23 PM > ::To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > ::Subject: IDS that retaliates. > :: > :: > :: > :: > ::Hi > :: > ::I read a long time ago that some goverment agency in the US > ::was working on a IDS that could retaliate. I wonder if > ::someone has any information on any IDS that does that, or any > ::ideas on how to make an IDS that in return of an event > ::triggers different securitymeasures. > :: > ::Thankfull for all replys. > :: > ::Regards > ::Charles > ::--------------------------------------------------------------------- > ::Charles Skoglund, OM AB (Norrlandsgatan 31) > ::SE-105 78 Stockholm > ::Email: [EMAIL PROTECTED] > ::Phone: +46 (0)8 405 64 90 > ::Mobile: +46 (0)70 597 52 32 > ::Switchboard: +46 (0)8 405 60 00 > :: > :: > :: > > -----BEGIN PGP SIGNATURE----- Version: PGP 6.5.8 Comment: Made with pgp4pine 1.76 iQA/AwUBPIUmEpuKtP8CSC69EQJRAwCg03ecOzhlstb4KOW1DCwziX+K8loAoNe9 R+Tzn8JzTaeP0ITStQO1Injt =tmSj -----END PGP SIGNATURE-----
