From owner-freebsd-security  Mon Jun 24 18:38:34 2002
Delivered-To: freebsd-security@freebsd.org
Received: from lariat.org (lariat.org [63.229.157.2])
	by hub.freebsd.org (Postfix) with ESMTP id 8A06A37B403
	for <freebsd-security@FreeBSD.ORG>; Mon, 24 Jun 2002 18:38:30 -0700 (PDT)
Received: (from brett@localhost)
	by lariat.org (8.9.3/8.9.3) id TAA10792;
	Mon, 24 Jun 2002 19:38:21 -0600 (MDT)
Date: Mon, 24 Jun 2002 19:38:21 -0600 (MDT)
From: Brett Glass <brett@lariat.org>
Message-Id: <200206250138.TAA10792@lariat.org>
To: freebsd-security@FreeBSD.ORG, klaus@compt.com
Subject: Re: automated blackholing
In-Reply-To: <20020624183614.J589@cthulu.compt.com>
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

See the SNOBOL4 program at http://www.brettglass.com/logmonitors/. It
demonstrates how to react to a log message by blackholing the machine
that attempted to connect.

--Brett

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message