Re: [cobalt-users] PortSentry works !

["Carrie Bartkowiak" <ravencarrie@xxxxxxxx>]

> * PortSentry will "block" (KILL_ROUTE) based on what you tell it to do.
> So if you ask for hosts.deny, it blocks via tcp_wrappers. If you ask for
> ipchains, it blocks via ipchains.

I bet you can tell it to do both. *diving into the portsentry manual*
Ahh. On a previous post you said you'd have to find yourself a portscanner
so you could monitor your network. I found this on PortSentry's page:
http://www.insecure.org/nmap/index.html
It's called nmap, and it's free. Now I just have to figure out how to use it
to scan my server, as I have a static IP here at home that the whole network
is using and don't want to block myself. ;)
You may want to look into HostSentry as well. I'm looking at it right now.

I started this days ago and haven't rebooted my computer since then. You
asked me not to leave you hanging and I kept getting distracted, now it's
days old.
What you told me makes a lot of sense, and the resulting conversation that
everyone's been throwing in their 2 cents worth has really helped me a lot.
I hope it's helped other people too; in light of all the flames running
'round about "chatting" on the list.

CarrieB