Re: [cobalt-users] Portsentry Help

[Ricky Dhatt <ricky@xxxxxxx>]

Try the portsentry.ignore file -- you can choose hosts you want to ignore.

--Ricky Dhatt
IT Specialist
Electric Arrow Web Development Studio
Phone: 206-381-5853

On Thu, 15 Feb 2001, Michael Schumacher wrote:

> Is there a good source out there for portsentry help. I have installed it,
> but need help tweaking the settings. Right now I am getting the following
> for several people on our local network:
>
> Feb 15 13:12:31 www portsentry[5401]: attackalert: UDP scan from host:
> 192.168.1.64/192.168.1.64 to UDP port: 161
>
> I've checked on these machines and they are not doing anything unusual that
> I can see. The machine that I am running portsentry on is our corporate web
> server/e-commerce site and our mail server.
>
> Any ideas? Would it be bad not to watch port 161? I think this is the SNMP
> port.
>
> TIA.
>
>
> ______________________________________________
> FREE Personalized Email at Mail.com
> Sign up at http://www.mail.com/?sr=signup
>
> _______________________________________________
> cobalt-users mailing list
> cobalt-users@xxxxxxxxxxxxxxx
> To Subscribe or Unsubscribe, please go to:
> http://list.cobalt.com/mailman/listinfo/cobalt-users
>