NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Updated Intrusion Detection for FW-1 NG (alert.sh)



Hi Mr. Spitzner:

Just wanted to send you a quick note to say THANKS!! for your past and
present work to educate folks like me in the ways of security. Your work has
helped me a great deal. Like many others I suspect, I got dropped in the deep
end (proof of the Peter Principle..) and am learning about things like routing, Unix,
checkpoint and of course, security at the school of hard knocks. Your site has
been one of the bright spots in my education and I've made your several of your
white papers required reading here.

If I, or my company, can ever help out please let me know. We'd be glad to do
whatever we can to assist within our abilities.

Again, my thanks.



-----------------------------------
Joe Pampel
CTO
Ardsley Partners
[email protected]

>>> Lance Spitzner <[email protected]> 11/13/01 12:20PM >>>
As some of you may know, I've written both a paper and
a tool that demonstrates one method of near real-time
Intrusion Detection with FW-1.  I've updated both the
paper and the tool for FW-1 NG (Next Generation).
You can find them both at

  Intrusion Detection for FW-1
  http://www.enteract.com/~lspitz/intrusion.html

Any testing or feedback on this new update greatly
appreciated.  Also, I have updated my Armoring Solaris
paper for FW-1 NG (Next Generation).  You can find this
paper on

  Armoring Solaris: II
  http://www.enteract.com/~lspitz/intrusion.html


I hope to update several of my other papers (such as
the FW-1 State Table and Firewall Rulebase papers)
soon.  I want to be sure all these documents reflect
the latest changes with NG.  You can find these at

  http://www.enteract.com/~lspitz

Hope this helps!

--
Lance Spitzner
http://project.honeynet.org

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================

===============================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
===============================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.