Re: IDS: how do you configure your firewall ( router ) to log to a different machine ?

[Robert Graham <robert_david_graham@yahoo.com>]

FAQ: See http://www.ticm.com/kb/faq/idsfaq.html
IDS: See http://www-rnks.informatik.tu-cottbus.de/~sobirey/ids.html
HELP: Having problems.. Then email questions to ids-owner@uow.edu.au
NOTE: You MUST remove this line from reply messages as it will be filtered.
SPAM: DO NOT send unsolicted mail to this list.
USUB: email "unsubscribe ids" to majordomo@uow.edu.au
---------------------------------------------------------------------------

--- Gerardo Soto <gsoto@compu-redes.net.mx> wrote:
> Hi this Gerardo again:
> 	At the time of this email O am recovering from Yet ANOTHER
> INTRUSION. Would anyone of you help me out in reconfiguring my
> firewall.
> Because obviously is not working as it shoud.
> T would appreciate any help.
> 	REGARDS!!!!!On

Firewalls will not solve all problems. For example, if you leave only
port 80/http open, there are still hundreds of CGI programs that can be
used to compromise the system.

I remember reading a news article recently about how a system in
Vermont was hacked via CGI programs. In response, the victims said they
were going to install a firewall to protect themselves. It doesn't work
that way.

_____________________________________________________________
Do You Yahoo!?
Free instant messaging and more at http://messenger.yahoo.com