Date:  Wed, 26 Aug 2009 13:42:01 +0200
From:  "Florian Arzberger" <arzberger (at mark) maxxnet.de>
Subject:  [coba-e:15948] AW:  Re: DenyHost/DFix
To:  <coba-e (at mark) bluequartz.org>
Message-Id:  <00bc01ca2642$3b16d6d0$b1448470$@de>
In-Reply-To:  <4A947D2C.3050800 (at mark) theanchoragesylvania.com>
References:  <2DAB4EF3-1B30-4A80-9B28-05C1CAC2B271 (at mark) housleyconsulting.com.au> <BAY107-W428D49C8AE2A6E64E87003D1070 (at mark) phx.gbl> <C81E2DF7ABD74911BB472BEC43ABD0A2 (at mark) HP9925NR> <4A8333EF.1040905 (at mark) theanchoragesylvania.com> <4AC0EE4443374853B240370C4E373A02 (at mark) HP9925NR> <5D1AFDCEFF6842F0A19B3AC3A086C636 (at mark) HP9925NR> <4A85F498.2060009 (at mark) theanchoragesylvania.com> <1EA69CB81B99462F8140C48C598F399E (at mark) HP9925NR> <4A863F80.6070705 (at mark) theanchoragesylvania.com> <AE66B107E5FA463A9A8908EE5D0A7743 (at mark) HP9925NR> <4A947D2C.3050800 (at mark) theanchoragesylvania.com>
X-Mail-Count: 15948

> Darrell D. Mobley wrote:
> > Greg, is it possible for your programs to look at the error_log and
> spot
> > users who are obvious trolling your server looking for
> vulnerabilities?
> 
> Absolutely. Sounds like a good idea to me. Give me a little time though
> - I am currently travelling for work, with limited (temperamental)
> access to email. I'll be back on deck in OZ next week.
> 

and... how about making dfix ignore ip's that are listed in /etc/hosts.allow
;)