[cobalt-users] portSentry 2001 config question

[Christopher Simmons - Mindset <cs@xxxxxxxxxxxxxxxx>]

Hi, Carrie-
I'm finally getting around to installing portsentry and wondering if you

have updated your quickstart guide, snipped below, from the archive?

I got a bunch of DOS or something similar attack on sunday morning (RaQ4

CPU went from 0.1 to 0.7 usage to usage of 7 !!! which has never
happened).

Thanks for all your helpful hints !

Christopher

[snip] carrie's original info
--------------------------------------
PortSentry:
# wget http://www.psionic.com/tools/portsentry-1.0.tar.gz
# gunzip portsentry-1.0.tar.gz
# tar -xvf portsentry-1.0.tar
# mv portsentry-1.0 portsentry
# cd portsentry
# make install
(Dunno why, but I had to get the 'portsentry' file from old machine
via ftp and drop it in this directory for install to work)

Turn on portsentry at bootup: (haven't done this yet)
add to /etc/rc.d/rc.local:
/usr/local/psionic/portsentry/portsentry -tcp
/usr/local/psionic/portsentry/portsentry -udp

To turn it on right now, just run those lines as root. You'll see
portsentry firing up and binding if you look in
/var/log/messages.

[/snip]

ps-- I tried sending this previously to the list and ends up dead
someplace. Hope this goes through. If it seems like I'm spamming, I'm
not. I just get the digests, so when a message doesn't show up for 1-3
days later, I assume it went into the event horizon. :)

--