On Mon, Jun 29, 2009 at 05:58:05PM +1000, Rod Whitworth wrote: > On Mon, 29 Jun 2009 09:39:07 +0200, Cristiano Deana wrote: > > >On Mon, Jun 29, 2009 at 9:23 AM, M. Feenstra<open...@itmon.nl> wrote: > > > >> Does something like this exist? Or maybe, is there a better way of > >> dealing with this? > > > >http://ossec.net/ > > > >it's EXACTLY what you want. > > > > They don't say they do pf on their webpage.
Not to mention that their slideshow about "internals" uses the phrase "the user has no choice" about what should be a configuration option. Sorry, I'm the user in this scenario, and I'll exercise the "don't use it" clause of "if you don't like it, don't use it" based on that. PS - if it really is a config option, they shouldn't use that terminology > > > *** NOTE *** Please DO NOT CC me. I <am> subscribed to the list. > Mail to the sender address that does not originate at the list server is > tarpitted. The reply-to: address is provided for those who feel compelled to > reply off list. Thankyou. > > Rod/ > /earth: write failed, file system is full > cp: /earth/creatures: No space left on device