search for: hogwash

Is anyone using an inline IDS like hogwash or snort-inline to drop packets in a system running shoreline? I _think_ I see how to configure it, but I''d be really interested in finding a howto or something... Thanks! Mike- -- Mornings: Evolution in action. Only the grumpy will survive. -- Please note - Due to the intense volu...

...that comes from spoofed hosts(non existent ip''s), drop other obvious malicious traffic. My problem is not dropping packets(hehe), the problem is dropping packets based on these rules, so that legit icmp/syn traffic etc will not be affected by the rules. I''ve done some testing with hogwash as transparent bridge to intercept and block malicious packets. I was however not able to use hogwash to drop icmp/syn based on above clearified rules. If someone could point me in the right direction/maybe someone has some examples(?) I would be very greatfull. Thanks in advance for any help....

IPS HLBR - Version 1.0 can detect malicious traffic using regular expressions Version 1.0 of Hogwash Light BR, released march 5th 2006, brings two interesting new features. The first one is the ability of using regular expressions to detect intrusion attempts and e-mails with virus or phishing. The second is the use of lists with banned words. HLBR is an IPS (Intrusion Prevention System) that rea...

...machine 2. The installer picks the smp kernel if the cpu flag "ht" is set -- which mine isn't. So, can anyone explain why, on a fresh bare-metal install I'm blessed with an smp kernel? Also, is the statement about an smp kernel running O.K. on a single processor machine pure hogwash or is there something goofy about my m/b and/or processor? Of course, once there is an -smp kernel installed "yum update kernel*" keeps the string of luck going. -- It is Sun Aug 21 09:48:33 CDT 2005 ratnow. The next Next-Step will begin in 2526087 seconds at 3:30 P.M. on Monday 9/19/...

...orts (which Supermicro does not sell)" and both statements sound insane to me! First, because the specs for 3008 says something else and i dont know how one can artificially reduce the number of supported hdds (beside the firmware - but why would one do that?) and the second statement is just hogwash as the externl/internal status of the ports have nothing to do with the sas cascading and the number of devices supported!! (and of course is really cheap to convert an internal port to an external port with a bracket) So, i ask you guys that have more knowledge and expertise: was this Senior Ap...

...-Original Message----- From: shorewall-users-bounces@lists.shorewall.net [mailto:shorewall-users-bounces@lists.shorewall.net] On Behalf Of mynullvoid Sent: Tuesday, March 29, 2005 9:34 PM To: Mailing List for Shorewall Users Subject: Re: [Shorewall-users] Shorewall and an inline IDS (snort-inline orhogwash) If I am not mistaken snort-inline is already in snort 2.3.2 --- Michael W Cocke <cocke@catherders.com> wrote: > Is anyone using an inline IDS like hogwash or snort-inline to drop > packets in a system running shoreline? I _think_ I see how to > configure it, but I''d b...

Ok, no one has said it yet so I will. http://37signals.com/svn/archives2/bezos_expeditions_invests_in_37signals.php?102#comments How is this going to affect Rails? Or is it? -- Posted via http://www.ruby-forum.com/.

...>> and both statements sound insane to me! >> First, because the specs for 3008 says something else and i dont know >> how one can artificially reduce the number of supported hdds >> (beside the firmware - but why would one do that?) and >> the second statement is just hogwash as the externl/internal status of >> the ports have nothing to do with the sas cascading and the number of >> devices supported!! (and of course is really cheap to convert an internal >> port to an external port with a bracket) >> So, i ask you guys that have more knowledge...

...oes not sell)" > and both statements sound insane to me! > First, because the specs for 3008 says something else and i dont know > how one can artificially reduce the number of supported hdds > (beside the firmware - but why would one do that?) and > the second statement is just hogwash as the externl/internal status of > the ports have nothing to do with the sas cascading and the number of > devices supported!! (and of course is really cheap to convert an internal > port to an external port with a bracket) > So, i ask you guys that have more knowledge and expertise: w...

On Fri, Jul 08, 2016 at 06:42:23PM -0700, Kevin Duraj wrote: > The issue is that delve was renamed to xapian-delve but documentation > is still saying that delve is delve. Who has access to update the > documentation? > > http://www.linuxfromscratch.org/blfs/view/svn/general/xapian.html That website has nothing to do with Xapian, so you probably need to contact whoever runs it.

> Mark Farver wrote: > > > On Fri, 2004-12-17 at 16:26 -0600, Kristian Kielhofner wrote: > > > >> We are getting pricing and one provider is telling us > that they have > >>quality issues with the "Integrated Access" product. From > what they > >>say it sounds like you can have audio dropouts on the voice > channels >

...h statements sound insane to me! >>> First, because the specs for 3008 says something else and i dont know >>> how one can artificially reduce the number of supported hdds >>> (beside the firmware - but why would one do that?) and >>> the second statement is just hogwash as the externl/internal status of >>> the ports have nothing to do with the sas cascading and the number of >>> devices supported!! (and of course is really cheap to convert an internal >>> port to an external port with a bracket) >>> So, i ask you guys that have...

Hi, Sorry if this is a dumb question but i can''t seem to find an anwser anything close to what i am trying to figure out... I have a dual boot machine with 3 disks - 2 x 1TB mirror OpenSolaris with ZFS root pool 1x 250GB Solaris 10 with ZFS root pool This is a development\testing\home file server machine only. My question is tho, since I can boot into either OpenSolaris or Solaris

Hi there good people, I''m a newbie in what concerns running Linux on machines other than desktops, so I need help from all you gurus out there :-) I have Linux installed on an old computer (Winchip C6, Pentium clone), acting as a router/firewall for two other computers. Both these machines are connected to the firewall via a dedicated ethernet card each, on different subnets,

So, hi all. First time commenting on the list. I personally think having tags (whether of type "author:" or type "by") is useful for two reasons. One: It allows multiple tags to be entered. Two, it clears up the potential problem listed by Fletcher regarding tags. by Christoph Freitag Affiliation: XYZ by Fletcher T. Penney Affiliation: ABC tags: Markdown, Standardization,

Greetings all, I''m forwarding a copy of an email I sent reporting attempted break-ins on my main server, earth.terran.org. I am forwarding this because I think it is relevant that folks watch for this kind of activity in their logs to catch people who "try doorknobs" in the middle of the night. After sending this email, I sent a talk request to the user, who was still logged