Re: ITP: portsentry
Hello Ben,
it's already packaged:
deb-src http://honk.physik.uni-konstanz.de/~agx/debian unstable main
The reason that it's not uploaded is the copyright(the author currently
reconsiders the license). It also contains a small script that mails the
sysadmin + a perl script, that adds IPs to portsentry.ignore on the fly(for
use with dhcp, ppp, etc.) + some manpages.
Greetings,
Guido
On Thu, Oct 14, 1999 at 06:17:01PM -0700, Ben Gertzfield wrote:
> This is my Intent to Package 'portsentry', an anti port-scanning
> daemon that watches for common scanning patterns and allows the
> sysadmin to do any of the following:
>
> 1) run a script to alert the sysadmin of the source IP and port the scan
> came from, and/or
>
> 2) add an ipchains rule to drop ALL traffic from that IP in the future,
> including ICMP (nice!) and/or
>
> 3) add a route sending all traffic from the incoming IP to a nonexistant
> host (if 2 is undesirable for some reason)
>
> I've written a small Perl script to perform step 1) and mail the
> admin with the IP and port, and will include it in the package.
>
> Anyone think I shouldn't package it up? :) Speak up now..
>
> Ben
>
> --
> Brought to you by the letters R and B and the number 17.
> "Porcoga daisuki!"
> Debian GNU/Linux maintainer of Gimp and GTK+ -- http://www.debian.org/
>
>
> --
> To UNSUBSCRIBE, email to debian-devel-request@lists.debian.org
> with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
>
--
PGP-Public Key: http://honk.physik.uni-konstanz.de/~guido/gunther.asc
GPG-Public Key: http://honk.physik.uni-konstanz.de/~agx/guenther.gpg.asc
Reply to: