Re: [TCLUG:22365] Hacked

[Scott Dier <dieman@ringworld.org>]

* Austad, Jay <austad@marketwatch.com> [001008 16:24]:
> If you're feeling really adventurous, set up snort
> (http://www.whitehats.com/ids).  This will give you a good idea of whose
> banging on your door.  It's funny to see people running windows exploits

On the flipside, if you have (tens of) thousands to throw away, check
out NFR and anzen flightjacket.  Yeah, its a windows frontend, but the
backend is openbsd, and its helped us *immensely* at cs.umn.edu in
finding out whats going on with 'strange' traffic, or other such
problems.

-- 
Scott Dier <dieman@ringworld.org> #nicnac@efnet 
http://www.ringworld.org/  finger:dieman@destiny.ringworld.org

<CmdrTaco:#kuro5hin> SLSAHDOT IS ALWAYS NEWS FOR NERDS.

PGP signature