Search

	display results
words begin exact words any words part

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW1] Can I create a dynamic BLOCK based on "sensor IP's"

To: <[email protected]>
Subject: [FW1] Can I create a dynamic BLOCK based on "sensor IP's"
From: "Patrick Coomans" <[email protected]>
Date: Mon, 08 Jan 2001 09:34:39 +0100
Sender: [email protected]

Hi,

I would like to create some fake "sensor" IP addresses on a FW1 and create a dynamic BLOCK on the source IP address of those who try to connect to specific ports on this address.

E.g. I would like to add an address and listen for FTP connect attempts. If an attempt is logged, I would like FW1 to execute a BLOCK on the source IP address.

I know that I've seen some kind of scripting in the past to accomplish this, but I cannot find any references to them anymore.

All suggestions are welcome!

Thx,

Patrick

Follow-Ups:
- Re: [FW1] Can I create a dynamic BLOCK based on "sensor IP's"
  - From: [email protected] (Carl E. Mankinen)

Prev by Date: RE: [FW1] 2 Questions...SMTP security & Floodgate alternatives
Next by Date: [FW1] Migrate NT fw1 to SOLARIS ... and keep the rulebase?
Previous by thread: [FW1] Rule 0 problem when trying to use new subnet
Next by thread: Re: [FW1] Can I create a dynamic BLOCK based on "sensor IP's"
Index(es):
- Date
- Thread