🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.os.linux.security
Article #42

ANNOUNCE: myNetWatchman PerlAgent for IPCHAINS

#42
From: Lawrence Baldwin
Date: Fri, 16 Feb 2001 21:32
35 lines
2367 bytes
If you're a Linux/IPChains user and are tired of spending hours
backtracing port scan attempts and sending abuse reports, you may be
interested in:

http://www.mynetwatchman.com/aboutsec2.htm

I've built a system that allows you to automatically upload attack
information into my database.  I do all the backtracing and aggregate
the data from other Agents.  Using this higher-level perspective, it's
much easier for me to differentiate between false attacks (only one
victim) and more serious attacks (multiple victims).

If you want to get an idea of what the overall vision is see:

http://www.mynetwatchman.com/vision.htm

Here are some of the cases we've tracked and got detailed information on
actions taken to address an abuse source:

http://www.mynetwatchman.com/mynetwatchman/hotclosed.asp


The PerlAgent is very new, so plz. bear with me...it is Open Source
(developed by Chad Wagner), so if anyone is interested in adding support
for other firewall formats, let me know.  We've already got Sonic Wall,
and Zone Alarm pretty much done.  I'm very interested in getting it
working Linksys Cable/DSL Router logs.

Enjoy.

-------------------------
Lawrence Baldwin
myNetWatchman.com
678-624-0924
http://www.mynetwatchman.com/about.htm - I'm under attack, now what?
Technical Details
Message-ID: <3A8D9C64.C93B1937@mynetwatchman.com>
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!nntp-relay.ihug.net!ihug.co.nz!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news2.atl.POSTED!not-for-mail

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: 10090f,59397ebac1155d18
X-Google-Attributes: gid10090f,public
X-Google-Thread: 106e9e,59397ebac1155d18
X-Google-Attributes: gid106e9e,public
X-Google-ArrivalTime: 2001-02-16 13:32:52 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!nntp-relay.ihug.net!ihug.co.nz!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!newsfeed.atl.bellsouth.net.MISMATCH!newsfeed.atl!news2.atl.POSTED!not-for-mail
Message-ID: <3A8D9C64.C93B1937@mynetwatchman.com>
From: Lawrence Baldwin <baldwinlSPAMMENOT@mynetwatchman.com>
X-Mailer: Mozilla 4.7 [en] (WinNT; U)
X-Accept-Language: en
MIME-Version: 1.0
Newsgroups: comp.os.linux.security,bellsouth.net.security
Subject: ANNOUNCE: myNetWatchman PerlAgent for IPCHAINS
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Lines: 35
Date: Fri, 16 Feb 2001 16:32:20 -0500
NNTP-Posting-Host: 208.61.64.253
X-Trace: news2.atl 982359141 208.61.64.253 (Fri, 16 Feb 2001 16:32:21 EST)
NNTP-Posting-Date: Fri, 16 Feb 2001 16:32:21 EST