[plug] Active response IDSs?

[bob]

On Sat, 2002-08-03 at 03:03, Craig Foster wrote:
> If you want to block people doing scans, you can use portsentry, where
> not-very-nice-people get sent to an iptables or ipchains DENY...

Yep, thats more or less what I wanted.
 
> Just make sure that VERY trusted machines are excluded, such as your
> routers and mail servers, just in case someone tries spoofing your
> router (very funny results - not)

Good point.
 
> Craig F.

Thanks for the feedback.
 
-- 
bob
Cave canem...te necet lingendo.