[XCSSA] Logging & dynamic firewall program(s)

xcssa@xcssa.org xcssa@xcssa.org
Thu, 25 Oct 2007 11:49:29 -0500


Why not just something like http://www.rickk.com/sslwrap/ ?

On 10/24/07, xcssa-admin@xcssa.org <xcssa-admin@xcssa.org> wrote:
> On Wednesday 24 October 2007 01:39:06 xcssa-admin@xcssa.org wrote:
> >     You can see if dovecot is compiled to use tcpwrappers using ldd.  If
> > you see it linking against libwrap then it is just a matter of sorting out
> > what the programs name needs to be for the config file.
> >
> >     Nate
> >
> >
> >
> > Whew!  Thanks for the suggestion Nate - but that's way above my head.
> > I'm not a coder, just a builder/administrator.
>
> A bit harder anyway since dovecot is a modular system.
>
> Chuck..
> Another fix for watching multiple daemons (more securely than allwoing/denying
> them via xinetd IMHO) is something like swatch:
>         http://www.trustix.org/wiki/index.php/Swatch
>         http://swatch.sourceforge.net/
>
> It does the same as DenyHosts but does many many server side protos via log
> file groking and blocks via iptables (better than using allow/deny files)...
>
> Can easily be set up for pop3, IMAP, sshd, and more.
>
> Tweeks
> _______________________________________________
> XCSSA mailing list
> XCSSA@xcssa.org
> http://xcssa.org/mailman/listinfo/xcssa
>