[cobalt-users] hosts.deny port scanners

[Kris Dahl <kris@xxxxxxxxxxxxx>]

It looks like the Qube automatically adds hosts that port scan it into the
hosts.deny.  Pretty cool.

'Cept I was doing some security monitoring on the thing and couldn't figure
out why I was not able to ssh into the box the next day from my workstation
and my workstation only--and didn't put two and two together til yesterday.
Had a couple of other hostname/ips in the deny list (like @home's resident
portscanner and a couple script kiddies).

Was wondering, anyone know what software cobalt is using to 'detect' the
port scans?

Thanks,
-k