[[lug] portsentry]

[Justin]

If you run logcheck along w/ portsentry it will check the syslog and email you
logs of any attacks or scans. But if you want it instantaneous to when the
scan starts I'm not sure. Have to do some checking  :)

Justin

"JEFF PFOHL" <pfohl at sandia.gov> wrote:
> Is anyone running PORTSENTRY?? I want it to email me when it detects a
> scan. SO I added the line:
> 
> KILL_RUN_CMD="/bin/mail -s PORTSENTRY!! pfohl at sandia.gov
</usr/local/portsentry.history"
> 
> in /usr/local/portsentry/portsentry.conf
> 
> But I don't get emailed. Now I can type the line /bin/mail -s etc at
> the command prompt and I do get email. 
> 
> What am I missing?
> 
> Thanks!
> 
> -- 
> 				JEFF PFOHL
> 			 	E-MAIL: pfohl at sandia.gov
> 				PHONE : (505) 844-7033  work
> 					(505) 299-9516  home
>         				(505) 844-6729  fax
> 				http://nucalf.physics.fsu.edu/pfohl
> 
> "My grandfather once told me that there are two kinds of people: 
>  Those who do the work and those who take the credit. He told me to 
>  try to be in the first group; there was much less competition."
> 
>  - Indira Ghandi, the late Prime Minister of India
> 
> 
> 
> 
> _______________________________________________
> Web Page:  http://lug.boulder.co.us
> Mailing List: http://lists.lug.boulder.co.us/mailman/listinfo/lug


____________________________________________________________________
Get your own FREE, personal Netscape WebMail account today at http://home.netscape.com/webmail