[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [cobalt-users] Under attack_



On Mon, 19 Feb 2001, Brandon Wheaton wrote:

} LogCheck does this, only better.  I would recommend taking the 10
} minutes to install LogCheck to augment your PortSentry installation.

	I think you miss the point. My script is not meant to
replace logcheck. Not by any stretch of the imagination. It's sole
purpose is to insure that the server's administrator is notified
when portsentry is triggered. That's all it does. It provides a
heads up and thusly, or at least that's the way it works here,
prompts one to pay a bit more attention to the logcheck reports.


That's exactly what I'm doing with it... logcheck does its thing via cron, and the portsentry.mailbot sends me notices right as something I should be aware of takes place. I've been pretty happy with the setup so far. In this day & age, I really don't feel that being *too* paranoid is a bad thing.

I've got mail filters set up for the more important things, and those get cc'd off to my email pager. :)