[cobalt-users] attn CarrieB - question 4U

[Christopher Simmons - Mindset <cs@xxxxxxxxxxxxxxxx>]

Hi, Carrie-
I'm finally getting around to installing portsentry and wondering if you

have updated your quickstart guide, snipped below, from the archive?

I got a bunch of DOS or something similar attack on sunday morning (RaQ4

CPU went from 0.1 to 0.7 usage to usage of 7 !!! which has never
happened).

Thanks for all your helpful hints !

Christopher

[snip] carrie's original info
--------------------------------------
PortSentry:
# wget http://www.psionic.com/tools/portsentry-1.0.tar.gz
# gunzip portsentry-1.0.tar.gz
# tar -xvf portsentry-1.0.tar
# mv portsentry-1.0 portsentry
# cd portsentry
# make install
(Dunno why, but I had to get the 'portsentry' file from old machine
via ftp and drop it in this directory for install to work)

Turn on portsentry at bootup: (haven't done this yet)
add to /etc/rc.d/rc.local:
/usr/local/psionic/portsentry/portsentry -tcp
/usr/local/psionic/portsentry/portsentry -udp

To turn it on right now, just run those lines as root. You'll see
portsentry firing up and binding if you look in
/var/log/messages.

[/snip]