From owner-freebsd-questions@FreeBSD.ORG Mon Mar 14 09:30:03 2005 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 3F31216A4CE for ; Mon, 14 Mar 2005 09:30:03 +0000 (GMT) Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.197]) by mx1.FreeBSD.org (Postfix) with ESMTP id D241943D5F for ; Mon, 14 Mar 2005 09:30:02 +0000 (GMT) (envelope-from regnans@gmail.com) Received: by wproxy.gmail.com with SMTP id 69so1366683wri for ; Mon, 14 Mar 2005 01:30:02 -0800 (PST) DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=beta; d=gmail.com; h=received:message-id:date:from:reply-to:subject:cc:in-reply-to:mime-version:content-type:content-transfer-encoding:references; b=HS/RcBS3fNXd0AudwsVCpn9CkqA+QG3cPVOXFSKy96/fX6a6ibylsa/oE25k/HZsFqop4CaAktWiG6LitLceJL5XR0krb4ZzbV6Vos7RDmsj/ZzkOJAGsEPy2Wp6DqX5Zbz/CVJTagDK25v7F6sTXRoYr220RAyVnfc8xnlyEJ4= Received: by 10.54.82.19 with SMTP id f19mr727427wrb; Mon, 14 Mar 2005 01:30:02 -0800 (PST) Received: by 10.54.53.70 with HTTP; Mon, 14 Mar 2005 01:30:02 -0800 (PST) Message-ID: <68b3483d050314013051ad3226@mail.gmail.com> Date: Mon, 14 Mar 2005 10:30:02 +0100 From: h p In-Reply-To: <20050313233248.GR18080@alzatex.com> Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit References: <20050313233248.GR18080@alzatex.com> cc: sgnezdov@sergei.homeunix.org cc: freebsd-questions@freebsd.org Subject: Re: Howto monitor system security X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list Reply-To: h p List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 14 Mar 2005 09:30:03 -0000 [...] > > FreeBSD security email is rather anoying, because it keeps sending > > messages even if nothing has changed. I need an email sent to me only > > if there is something abnormal. > > What happens when someone breaks in and disables it from sending email? > > Think of it as a kind of heartbeat. Well, different minds work differently, but for me it adds vastly to the noise level. If everything is normal, I get a mail. If there is something wrong, I get a mail. A different one, for sure, but I have to actually read it to know. If I only get a mail in a special case, I am much more inclined to read it than if I get a mail every day for 300 days and on the 301st there is a mail with a warning. I've stopped paying attention long before that. Just my thoughts.... Helge