[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-users] Denial-of-service attacks with QubeII??



Ould schrieb:
> script to avoid GUI of QubeII. My problem is how to let Qube take into
> account
> denial-of-service attacks.

i`m not sure if i understand; i assume you want to log
denial-of-service-attacks ?

this is not easy, as there are many different types of dos-attacks.

some of them are difficult to log, as they concern the network instead
of your machine itself.
others are logged autometically, but you`ll have to learn to understand
your logs.

a good starting point would be

www.psionic.com -> abacus project -> portsentry and logcheck (to report
portscans)
www.snort.org -> a lightweight intrusion detection system

you may install an icmp logger, too.

if you want to USE your qube FOR dos-attacks instead, maybe could be the
wrong place to ask for...

cu

-- 

H. P.  Stroebel, Germany