Date: Sat, 13 May 2006 15:17:16 +0900
From: roya <royal (at mark) 1st-priority.mydns.to>
Subject: [coba-e:05146] Re: Portsentry
To: coba-e (at mark) bluequartz.org
Message-Id: <20060513145253.231B.ROYAL (at mark) 1st-priority.mydns.to>
In-Reply-To: <003201c67569$2b8462b0$6400a8c0@COMPUTER8SD7ER2>
References: <001c01c6754f$9b052670$6400a8c0@COMPUTER8SD7ER2> <003201c67569$2b8462b0$6400a8c0@COMPUTER8SD7ER2>
X-Mail-Count: 05146
hi
my conf is portscan catched after host block
At the same time send to server admin
if misidentification it
I'm afraid /etc/hosts.deny block host line deleted
-----------------------------------
KILL_HOSTS_DENY="ALL: $TARGET$"
KILL_RUN_CMD="/bin/mail -s 'Portscan from $TARGET$ on port $PORT$' admin < /dev/null"