[plug] Attempted Intrusions

[Andrew Cowie]

On Wed, 2004-20-10 at 10:00 +0800, Bill Kenworthy wrote:
> I do it dynamicly off log messages.  if someone hits a tripwired port,
> it drops them silently forevermore until I flush the chains.

Bill, do you have that set of scripts together in some coherent
redistributable form?

It strikes me that this is exactly the sort of thing I've wanted to do
from time to time in the past, but your scheme sounds richer than what I
came up with. Would you be willing to post them?

AfC
Vancouver

-- 
Andrew Frederick Cowie

OPERATIONAL DYNAMICS
Operations Consultants and Infrastructure Engineers

http://www.operationaldynamics.com/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.plug.org.au/pipermail/plug/attachments/20041020/64c4c5ee/attachment.pgp>