Re: intrusion detection / logfile reporter

2001-11-10 Thread Timo Boewing
Original Message Subject: Re: intrusion detection / logfile reporter Date: Sat, 10 Nov 2001 00:24:34 -0800 (PST) From: Alvin Oga <[EMAIL PROTECTED]> To: "Timo Boewing" <[EMAIL PROTECTED]> CC: "Debian User (en)" hi timo i like to ask mor

Re: intrusion detection / logfile reporter

2001-11-10 Thread Alvin Oga
hi timo i like to ask more detailed stuff... here's some simpler answers... - as others have said, download and install logcheck or equivalent -- Debian security howto http://www.debian.org/doc/manuals/securing-debian-howto/ -- patch your kernel - add libsafe, ow1, etc

Re: intrusion detection / logfile reporter

2001-11-09 Thread Gary Hennigan
"Timo Boewing" <[EMAIL PROTECTED]> writes: > Stephen E. Hargrove wrote: > > > http://www.psionic.com/ has some good stuff - logcheck, portsentry > > and > > > hostsentry. > > > > > Hello Stephen, > > Hey, that was *exactly* what i was looking for. When i have time, i > will try these packages

Re: intrusion detection / logfile reporter

2001-11-09 Thread Stephen Gran
Thus spake Timo Boewing: > > Hello all, > > I have some questions regarding system security. Besides of doing > filtering with IP tables, disabling inet.d services like telnet, r-tools > etc. and setting some general denials in /etc/hosts.deny (plus some > other stuff like changing default po

Re: intrusion detection / logfile reporter

2001-11-09 Thread Timo Boewing
Stephen E. Hargrove wrote: http://www.psionic.com/ has some good stuff - logcheck, portsentry and hostsentry. Hello Stephen, Hey, that was *exactly* what i was looking for. When i have time, i will try these packages. When i am done, i will let the list know about my experiences; if anyon

Re: intrusion detection / logfile reporter

2001-11-09 Thread Stephen E. Hargrove
* Timo Boewing ([EMAIL PROTECTED]) spake thusly: > > Especially, I am looking for a not-too-paranoid-to-setup-tool that can > review my logfiles and report me via beep and/or local mail that it > found something unusual in a log. Does anyone know of such a tool? http://www.psionic.com/ has som