Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 19 Apr 2000 10:42:05 -0500 (CDT)
From:      Peter William Green <pwgreen@engineering.uiowa.edu>
To:        freebsd-stable@freebsd.org
Subject:   Re: Intrusion detection
Message-ID:  <Pine.HPX.4.21.0004191036540.972-100000@l-ecn000.icaen.uiowa.edu>
In-Reply-To: <Pine.BSF.4.10.10004191718450.39737-100000@ipamzlx.physik.uni-mainz.de>

next in thread | previous in thread | raw e-mail | index | archive | help
a small piece of this puzzle...

A quick way to see connection attempts to ports which you don't use is to
add

log_in_vain="YES" to /etc/rc.conf

this will (from man rc.conf)

log_in_vain   (bool) Set to NO by default.  Setting to YES will
enable logging of connection attempts to ports that have no 
listening socket on them.

-pete

On Wed, 19 Apr 2000, O. Hartmann wrote:

> Dear Sirs.
> Do we have in FreeBSD 4.0 a standard tool for detecting intrusion attempts?
> If this is the case, please tell me how to use it or otherwise please inform
> me where to find in the ports selection a probate tool for running on a server box.
> Thanks.
> 
> Gruss O. Hartmann
> -------------------------------------------------------------------
> ohartman@ipamzlx.physik.uni-mainz.de
> 
> Klimadatenserver des IPA, Universitaet Mainz
> Netzwerk- und Systembetreuung




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.HPX.4.21.0004191036540.972-100000>