Re: Nosy neighbor

[Chuck Yerkes <chuck@snew.com>]

knocking on doors is not illegal.
A program that pokes identd is not close to an indication of a
probe.

be paranoid, it's good for you.  Check out snort. (in ports)

Quoting Dave Taira (bodhi@hagakure.org):
> On Tue, 7 Aug 2001, A farmer using BSD, eh! wrote:
> 
> > On Tue, Aug 07, 2001 at 10:59:25AM -0700, Dave Taira wrote:
> >
> > > default block-and-log, with specific connections (ssh, http, whatever
> >
> > No. No. No. Dont log unless a full array of raids are in place.
> 
> *shrug* My box is pretty low-traffic, so it's not a big deal. You could
> also log stuff temporarily (say for a day), just to see if the one box
> was regularly probing, or if it's just a couple pokes.