search for: fwlogwatch

Hallo, in CentOS 5 fwlogwatch is available. CentOS 6: I have found nothing. Snort: installation from source? Other idea? Alternative software? OSSEC? Thank you for help in advance Best regards Helmut -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.centos.org/piper...

I have a perferctly working shorewall system, with basic configuration (external real IP, one private address internal network with some forwarded services), and log handling with fwlogwatch. My problem is that I can''t find out how to make something like this with shorewall (TCP-connections only): - Allow protocol x connections from IP x.x.x.x without logging - Allow protocol x connections from anywhere, but log connection establishment packets (SYN-packets) for t...

...succeeded gen 2 14:12:25 firewall ntpd: Avvio ntpd succeeded gen 2 14:12:25 firewall gpm: Avvio gpm succeeded gen 2 14:12:29 firewall httpd: Avvio httpd succeeded gen 2 14:12:29 firewall pptpd: Avvio pptpd succeeded gen 2 14:12:30 firewall crond: Avvio crond succeeded gen 2 14:12:30 firewall fwlogwatch: Avvio di fwlogwatch: gen 2 14:12:30 firewall fwlogwatch: succeeded gen 2 14:12:30 firewall fwlogwatch: ^[[60G gen 2 14:12:30 firewall fwlogwatch: gen 2 14:12:30 firewall rc: Starting fwlogwatch: succeeded gen 2 14:12:30 firewall squid: Avvio di squid: gen 2 14:12:32 firewall squid: . gen...

...tion about how to protect the whole network from spyware with the /etc/hosts file (a nice side benefit from doing DNS proxy). http://www.mvps.org/winhelp2002/hosts.htm -A *huge* disclaimer on running squid on a machine with a public interface. -Consider using webmin to manage this outside a GUI. -fwlogwatch can parse log files nicely. http://fwlogwatch.inside- security.de/ Biggest issue I have with your setup: -I wouldn't use Guard Dog as the GUI setup - it is very nice, but inflexible and not really meant for what you are doing. Try kmyfirewall instead if you want a GUI for iptables. It offe...

Hello! A machine I manage remotely for a friend comes under a distributed ssh break-in attack every once in a while. Annoyed (and alarmed) by the messages like: Aug 12 10:21:17 symbion sshd[4333]: Invalid user mythtv from 85.234.158.180 Aug 12 10:21:18 symbion sshd[4335]: Invalid user mythtv from 85.234.158.180 Aug 12 10:21:20 symbion sshd[4337]: Invalid user mythtv from 85.234.158.180 Aug 12

Hello! A machine I manage remotely for a friend comes under a distributed ssh break-in attack every once in a while. Annoyed (and alarmed) by the messages like: Aug 12 10:21:17 symbion sshd[4333]: Invalid user mythtv from 85.234.158.180 Aug 12 10:21:18 symbion sshd[4335]: Invalid user mythtv from 85.234.158.180 Aug 12 10:21:20 symbion sshd[4337]: Invalid user mythtv from 85.234.158.180 Aug 12