Страница 1 из 1

portsentry

Добавлено: 2008-08-14 9:28:58
izvorot
Доброго Дня Уважаемые!прочитал статейку http://www.lissyara.su/?id=1145 и поставил себе таку цяцку. все вроде бы ничего да вот беда в файл portsentry.ignore вношу 192.168.0.0/24 -чтобы мою сеть не блочил - а получается что оно не работает и блочит мои локальные адреса.может я чаво то не так внес?помогите избавиться от этой напасти

Re: portsentry

Добавлено: 2008-08-14 9:30:42
Alex Keda
перезапускал?
в логах что

Re: portsentry

Добавлено: 2008-08-14 9:35:23
izvorot
пезагрузил portsentry, затем iptables.
а в логах после перезагрузки пусто-за сегодня вообще ничего нет 8(

Re: portsentry

Добавлено: 2008-08-14 9:49:04
izvorot

Код: Выделить всё

Aug 14 09:47:01 ASP-gateway syslogd 1.4.2: restart.
Aug 14 09:47:33 ASP-gateway portsentry[21613]: securityalert: Psionic PortSentry is shutting down
Aug 14 09:47:33 ASP-gateway portsentry[21613]: adminalert: Psionic PortSentry is shutting down
Aug 14 09:47:33 ASP-gateway portsentry[21611]: securityalert: Psionic PortSentry is shutting down
Aug 14 09:47:33 ASP-gateway portsentry[21611]: adminalert: Psionic PortSentry is shutting down
Aug 14 09:47:33 ASP-gateway portsentry[21778]: adminalert: Psionic PortSentry 1.1 is starting.
Aug 14 09:47:33 ASP-gateway portsentry[21780]: adminalert: Psionic PortSentry 1.1 is starting.
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced mode will monitor first 1024 ports
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced mode will monitor first 1024 ports
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced mode will manually exclude port: 520
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced mode will manually exclude port: 138
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced mode will manually exclude port: 137
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced mode will manually exclude port: 67
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 137
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 138
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 631
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 929
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 520
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 138
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 137
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: Advanced Stealth scan detection mode activated. Ignored UDP port: 67
Aug 14 09:47:33 ASP-gateway portsentry[21781]: adminalert: PortSentry is now active and listening.
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced mode will manually exclude port: 113
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced mode will manually exclude port: 139
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 21
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 22
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 139
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 445
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 631
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 113
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: Advanced Stealth scan detection mode activated. Ignored TCP port: 139
Aug 14 09:47:33 ASP-gateway portsentry[21779]: adminalert: PortSentry is now active and listening.