Re: IDS: Computer Security - Long message

["Cyber Optik" <cyber_optik@hackhour.com.br>]

FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems.. Then email questions to ids-owner@uow.edu.au
NOTE: You MUST remove this line from reply messages as it will be filtered.
SPAM: DO NOT send unsolicted mail to this list.
USUB: email "unsubscribe ids" to majordomo@uow.edu.au
---------------------------------------------------------------------------

Hi all...

>The 30 days trial version (1.04 and not 1.35) you can get on
www.signal9.com can disapoint you, because if can be crashed/killed by some
script kiddie using known exploits. Test it, and then buy it, because 1.04
as many known ways to crash (and no, there is no crack for 1.35 version, as
far as i know, if i'm wrong please let me know).

Yep... Exists many ways to crash Conseal Firewall 1.04 ... or better ...
many ways to crash firewalls 4 windows. The problem is not with Conseal
Firewall... and yep.. with the SO... :o)
I saw in HTTP Zip Crawler (is down now) the crack to 1.35 yet...  but i
don't have it...

>About trojan ports like 12345 and 31337, its better monitor and protect
them in NukeNabber too, like some more other ports.


I think the better way(IMHO) is filtering the connections to ports 12345 and
31337 in your router, setting to deny all types of connection in this
ports...

>I'm a Signal9 helper (but i'm not from Signal9) in Undernet at #firewall,
where you can get help (see also http://www.betatesters.com/firewall/) and
where sometimes James Grant or Sam Curry from Signal9 Support use to be.

Conseall is a good firewall to users...
But i have doubts..  Do u use this firewall for a long time? What test's
types u make it?

>Just a little example ... i allready send logs for analisys at Signal 9,
with 13Mb long for just 1 single attack ... and i didnt crash, just got a
little slow ;-)

Hmmm...   13 mbs??? Uau...  What type of attack you received? Only
portscanner and anybody trying connect in your defaults ports? Or DoS
Attack? I'm tested only a old version of Conseal...

>In other hand ... a bad configuration just take 2/3 "log lines" to put you
down ...


Well... i'm sure this...

See ya!

Cyber Optik
www.hackhour.com.br
cyberoptik@hackhour.com.br
Hack Hour Inc. 1999 - Brazil