Howto monitor system security

[Loren M. Lang]

On Sun, Mar 13, 2005 at 09:58:41PM +0000, Sergei Gnezdov wrote:
> Sorry, it is a rather generic message, but the problem is a generic as
> well.
> 
> I am running my FreeBSD machine on DMZ.  I use ipfw and I expose http
> and smtp ports.  I also expose sshd port, but only to a trusted
> network (work).  I'd like to know what is the best way to monitor my
> machine security.
> 
> FreeBSD security email is rather anoying, because it keeps sending
> messages even if nothing has changed.  I need an email sent to me only
> if there is something abnormal.

What happens when someone breaks in and disables it from sending email?

Think of it as a kind of heartbeat.

<snip>

> 
> _______________________________________________
> freebsd-questions at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to "freebsd-questions-unsubscribe at freebsd.org"

-- 
I sense much NT in you.
NT leads to Bluescreen.
Bluescreen leads to downtime.
Downtime leads to suffering.
NT is the path to the darkside.
Powerful Unix is.

Public Key: ftp://ftp.tallye.com/pub/lorenl_pubkey.asc
Fingerprint: CEE1 AAE2 F66C 59B5 34CA  C415 6D35 E847 0118 A3D2
 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20050313/cf6791dd/attachment.bin