[FW1] Intrusion Detection script ver 1.4.4 for FW-1 (fwd)

[Lance Spitzner <lance@FW1-NOSPAMspitzner.net>]

Not sure if this made the list first time around. :-0

---------- Forwarded message ----------

Thanks to a great idea from Charlie Reitsma I've updated 
the FW-1 alert.sh script (Probe detection).  The new version
1.4.4 now limits the TOTAL number of emails you can get 
in a day.

Older versions limited the number of alerts you could get
from a single source probing you.  However, in certain 
attacks/probes, the source could be spoofed and constantly 
changing, resulting in thousands of alerts (and emails).  
This new version will protect you by limiting the TOTAL 
number of emails you can receive in a day (default is 500).  
You can set this number to whatever you want.

As always, FW-1 Intrusion Detection script
http://www.enteract.com/~lspitz/intrusion.html

Thanks!

lance




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================