[XCSSA] Logging & dynamic firewall program(s)

[xcssa@xcssa.org]

--pf9I7BMVVzbSWLtt
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Mon, Oct 22, 2007 at 08:04:04PM -0500, xcssa-admin@xcssa.org wrote:
> Well, ideally, could set up a box at the gateway using
> http://www.subspacefield.org/~travis/dfd/
> Alternately, could do a proxy relay through aformationed box,
> otherwise, deny connection.

Hiya, Travis (author of DFD) here.

You might be able to use DFD_TBK.  I honestly don't recall what shape
it's in.  That would work right on the box.

Alternately, you could use DFD_KEEPER on an OpenBSD box protected the
Linux box.

The easiest answer may be to try using "dovecot" as the program name
with TCP wrappers, since it links against libwrap.

By the way, my latest paper is out folks:

http://www.subspacefield.org/security/security_concepts.html

--=20
Life would be so much easier if it was open-source.
<URL:http://www.subspacefield.org/~travis/> Eff the ineffable!
For a good time on my UBE blacklist, email john@subspacefield.org.

--pf9I7BMVVzbSWLtt
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (OpenBSD)
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=Oror
-----END PGP SIGNATURE-----

--pf9I7BMVVzbSWLtt--