Date: Wed, 25 Apr 2001 23:18:47 -0400 (EDT) From: Garrett Wollman <wollman@khavrinen.lcs.mit.edu> To: Michael Scheidell <scheidell@fdma.com> Cc: freebsd-security@FreeBSD.ORG Subject: Re: Connection attempts (& active ids) Message-ID: <200104260318.XAA16168@khavrinen.lcs.mit.edu> In-Reply-To: <200104260303.f3Q33CK49974@caerulus.cerintha.com> References: <Pine.BSF.4.31.0104252147260.8017-100000@achilles.silby.com> <200104260303.f3Q33CK49974@caerulus.cerintha.com>
next in thread | previous in thread | raw e-mail | index | archive | help
<<On Wed, 25 Apr 2001 23:03:11 -0400 (EDT), Michael Scheidell <me2@privacy.net> said: > If I don't know they are trying, they WILL get in. If you don't make it worth their while, they will move on to a more tempting target. There are enough unpatched DeadRat 7.0 machines in the world to occupy their time for quite a while. My network has a thousand machines on it, of which about ten are somewhat under my personal control. I could spend all my time every day responding to IDS alerts, port scans, address scans, and such like, or I could put real effort into ensuring that the mission-critical systems I am responsible for are managed properly and securely -- not to mention educating the people who manage the others about doing the same. I don't think I need to state which activity I find more useful. -GAWollman To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200104260318.XAA16168>