Страница 1 из 1
portsentry
Добавлено: 2008-08-14 9:28:58
izvorot
Доброго Дня Уважаемые!прочитал статейку
http://www.lissyara.su/?id=1145 и поставил себе таку цяцку. все вроде бы ничего да вот беда в файл portsentry.ignore вношу 192.168.0.0/24 -чтобы мою сеть не блочил - а получается что оно не работает и блочит мои локальные адреса.может я чаво то не так внес?помогите избавиться от этой напасти
Re: portsentry
Добавлено: 2008-08-14 9:30:42
Alex Keda
перезапускал?
в логах что
Re: portsentry
Добавлено: 2008-08-14 9:35:23
izvorot
пезагрузил portsentry, затем iptables.
а в логах после перезагрузки пусто-за сегодня вообще ничего нет 8(
Re: portsentry
Добавлено: 2008-08-14 9:49:04
izvorot
Код: Выделить всё
Aug 14 09:47:01 ASP-gateway syslogd 1.4.2: restart.
Aug 14 09:47:33 ASP-gateway portsentry[21613]: securityalert: Psionic PortSentry is shutting down
Aug 14 09:47:33 ASP-gateway portsentry[21613]: adminalert: Psionic PortSentry is shutting down
Aug 14 09:47:33 ASP-gateway portsentry[21611]: securityalert: Psionic PortSentry is shutting down
Aug 14 09:47:33 ASP-gateway portsentry[21611]: adminalert: Psionic PortSentry is shutting down
Aug 14 09:47:33 ASP-gateway portsentry[21778]: adminalert: Psionic PortSentry 1.1 is starting.
Aug 14 09:47:33 ASP-gateway portsentry[21780]: adminalert: Psionic PortSentry 1.1 is starting.
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced mode will monitor first 1024 ports
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced mode will monitor first 1024 ports
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced mode will manually exclude port: 520
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced mode will manually exclude port: 138
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced mode will manually exclude port: 137
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced mode will manually exclude port: 67
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 137
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 138
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 631
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 929
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 520
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 138
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 137
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 67
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: PortSentry is now active and listening.
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced mode will manually exclude port: 113
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced mode will manually exclude port: 139
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 21
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 22
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 139
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 445
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 631
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 113
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 139
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: PortSentry is now active and listening.