TIP: Click on subject to list as thread! ANSI
echo: ra_util
to: Kent Timm
from: mark lewis
date: 2014-08-23 11:54:20
subject: IP logging utility..

On Fri, 22 Aug 2014, Kent Timm wrote to mark lewis:

 KT> Thanks for the info on the DNS lookup.  I will keep that in mind 
 KT> when watching odd activity.  I belive Netfoss can disable the DNS 
 KT> lookup, but it doesn't seem to take long to do when I've been 
 KT> watching it.    Interestingly (to me at least) when I telnet to 
 KT> the BBS from my main computer, it resolves the name for it within 
 KT> my lan.

yeah, i guess you have some type of DNS or hosts file stuff in place for
your local LAN names to be resolving... i do here for the dozen or so
machines running on this network... it is SOP for my installations ;)

 KT> I also run a webserver and have seen a few hack attemps, like stuff
 KT> trying to access default paths for mysql and php, which are not
 KT> installed since I have no need for them.

yeah, that's common... skidiots running scripts trying to find ways into a
system... i see them all the time on my static pages... it is funny but
after a while it gets old... this is one of the reasons why my perimeter
firewall has active response protections in operation and blocks those IPs
as soon as the violation(s) are detected... it even blocks attempts to
connect to ports for services that aren't running here (eg: MSSQL) ;)

 KT> I was going to try adding a mailserver also (hmailserevr for 
 KT> windows) but it was  driving me crazy and decided to just leave me 
 KT> email going the register forwarders.  I figured I have enough 
 KT> hoobies with out adding a mail serevr and watching it for spam. 
 KT> (ie I'd rather work on my model trains and ham radio stuff then 
 KT> fighter spammers:)  

any mail server being run today pretty much requires that spam, virus and
malware detection be part and parcel of the install... my mail server has
such as well as the added of my active response protections which detect
things like a system being rejected for spam because they are listed in a
spam block database somewhere... there's many things that i'm glad those
protections monitor for... even attempts at trying to log into an account
too many times with failures get blocked... and definitely don't try to
scan my system because you will be blocked :lol:

)\/(ark

Good security is not something you have, its something you do.

--- FMail/Win32 1.60
* Origin: (1:3634/12.71)
SEEN-BY: 3/0 633/267 640/384 712/0 620 848 770/1
@PATH: 3634/12 123/500 261/38 712/848 633/267

SOURCE: echomail via fidonet.ozzmosis.com

Email questions or comments to sysop@ipingthereforeiam.com
All parts of this website painstakingly hand-crafted in the U.S.A.!
IPTIA BBS/MUD/Terminal/Game Server List, © 2025 IPTIA Consulting™.