Article View: comp.os.linux.security
Article #41ANNOUNCE: myNetWatchman PerlAgent for IPCHAINS
From: Lawrence Baldwin
Date: Fri, 16 Feb 2001 21:20
Date: Fri, 16 Feb 2001 21:20
35 lines
2312 bytes
2312 bytes
If you're a Linux/IPChains user and are tired of spending hours backtracing port scan attempts and sending abuse reports, you may be interested in: http://www.mynetwatchman.com/aboutsec2.htm I've built a system that allows you to automatically upload attack information into my database. I do all the backtracing and aggregate the data from other Agents. Using this higher-level perspective, it's much easier for me to differentiate between false attacks (only one victim) and more serious attacks (multiple victims). If you want to get an idea of what the overall vision is see: http://www.mynetwatchman.com/vision.htm Here are some of the cases we've tracked and got detailed information on actions taken to address an abuse source: http://www.mynetwatchman.com/mynetwatchman/hotclosed.asp The PerlAgent is very new, so plz. bear with me...it is Open Source (developed by Chad Wagner), so if anyone is interested in adding support for other firewall formats, let me know. We've already got Sonic Wall, and Zone Alarm pretty much done. I'm very interested in getting it working Linksys Cable/DSL Router logs. Enjoy. ------------------------- Lawrence Baldwin myNetWatchman.com 678-624-0924 http://www.mynetwatchman.com/about.htm - I'm under attack, now what?
Technical Details
Message-ID:
<3A8D999A.3D8771FA@mynetwatchman.com>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!isdnet!howland.erols.net!feed2.news.rcn.net!rcn!newsfeed.atl!news2.atl.POSTED!not-for-mailShow Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit X-Google-Thread: 10090f,59397ebac1155d18,start X-Google-Attributes: gid10090f,public X-Google-Thread: 106e9e,59397ebac1155d18,start X-Google-Attributes: gid106e9e,public X-Google-ArrivalTime: 2001-02-16 13:20:39 PST Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!isdnet!howland.erols.net!feed2.news.rcn.net!rcn!newsfeed.atl!news2.atl.POSTED!not-for-mail Message-ID: <3A8D999A.3D8771FA@mynetwatchman.com> From: Lawrence Baldwin <baldwinlSPAMMENOT@mynetwatchman.com> X-Mailer: Mozilla 4.7 [en] (WinNT; U) X-Accept-Language: en MIME-Version: 1.0 Newsgroups: comp.os.linux.security,bellsouth.net.security Subject: ANNOUNCE: myNetWatchman PerlAgent for IPCHAINS Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit Lines: 35 Date: Fri, 16 Feb 2001 16:20:26 -0500 NNTP-Posting-Host: 208.61.64.253 X-Trace: news2.atl 982358427 208.61.64.253 (Fri, 16 Feb 2001 16:20:27 EST) NNTP-Posting-Date: Fri, 16 Feb 2001 16:20:27 EST