Messages in this thread | | | Date | Tue, 22 May 2001 11:55:59 -0500 | From | Joe Barr <> | Subject | Re: Final Warning [ was: ECN is on! ] |
| |
What is ECN? Is it the reason SNORT has started this lately:
<snip>
Active System Attack Alerts =-=-=-=-=-=-=-=-=-=-=-=-=-= May 22 10:11:18 pooh snort: spp_portscan: PORTSCAN DETECTED from 199.183.24.194 (STEALTH) May 22 10:11:22 pooh snort: spp_portscan: portscan status from 199.183.24.194: 1 connections across 1 hosts: TCP(1), UDP(0) STEALTH
</snip>
See ya, Joe Barr
On Tue, 22 May 2001 10:57:34 -0400
David Relson <relson@osagesoftware.com> wrote:
> At 10:18 AM 5/22/01, Steve Modica wrote: > > > >Perhaps it's none of my business, but it doesn't seem very sporting to > >just turn something on that breaks stuff and say "you had fair > >warning". Why not shut it back off, issue a statement saying it works > >now and will be re-enabled on June 10th or something, and everyone must > >do thus and so or they will break on that day? > > > >Vague things like "it'll be turned on real soon now" or ASAP really mean > >"never" since admins always have things with real deadlines at the top > >of their list. > > > I'd suggest something like: > > Final Warning. ECN is being turned on NOW. If your firewall doesn't > support ECN, this will be the last message that gets through to you from us. > > Such a message will have the interesting characteristic of being the last > message received. This will make it obvious why no further messages are > arriving. > > David > > -------------------------------------------------------- > David Relson Osage Software Systems, Inc. > relson@osagesoftware.com Ann Arbor, MI 48103 > www.osagesoftware.com tel: 734.821.8800 > > - > To unsubscribe from this list: send the line "unsubscribe linux-kernel" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html > Please read the FAQ at http://www.tux.org/lkml/ >
--
#--------------------------------------------------# | Joe Barr warthawg@blackhat.net | | Longears and Linux........... nowhere but Texas! | #--------------------------------------------------# - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |