Re: [cobalt-users] RaQ4 - Help with Portsentry on Cobalt RaQ4r

["Carrie Bartkowiak" <ravencarrie@xxxxxxxx>]

> I'm having some problems setting up Logcheck and Portsentry on my Cobalt
> RaQ4r.  The following log is emailed to me:
<snip>
> ...and so on, every 5 minutes, througout the day.

Tony this is someone actively trying to get in to your server through
port69... unless this is one of YOUR IP addies.
Is it always the same IP addy?

PortSentry is doing what it is supposed to - it's monitoring your ports for
scanners and attempts to get in; and then tossing the IP address of those
people into the hosts.deny file.  (So the next time they try scanning, you
are more or less 'invisible' to them.)

Be patient. You'll get used to the logs soon enough - but even after weeks
of having them your paranoia won't lessen any, trust me.  :)

CarrieB