Re: [cobalt-users] Need basic security help/how-to (RAQ-4)

[Nobody <bs@xxxxxxxxxxx>]

On Fri, 12 Jan 2001, tob@xxxxxxxxxxxx so wrote:

} portsentry, including how to get it to email info about hack attempts to me ?
}  Another "basic" I could use help on is this: Where would I look (logs, etc ...)
} to see if any hack attempts have already been made.

	While I don't have the time, or thick enough skin to answer
your questions, I do have two little scripts that you might find
useful. The first, portsentry.mailbot, was designed to email
portsentry port scan reports to where ever you want them to go. The
second, user_command.mailbot, can be run from cron and will email
you a copy of any file on a server. We use it to grab copies of the
bash history file for our user's who have shell access. They're both
very simple scripts - functional, but nothing fancy - quick hacks
that we've made available on our ftp server:

	ftp://ftp.webokay.com/pub/