Re: tcpd-style port bugging with reject from firewall?

dave (dave@reflexdata.co.uk)
Tue, 4 Aug 1998 16:18:00 +0100


>I would like to continue logging and fingering back probes to these
>ports. Does anyone have any suggestion for rejecting a connection to
>these ports, but _also_ triggering tcpd-style logging and processing
>(aka. tcp_wrappers-style)?

not sure is there is anything "out of the box" for the auto finger back
of remote hosts, (although its trivial to hack something together yourself),
but there where a couple of programs on the 4CD commerial distribution of
slakware 3.2 (slakware96). They were called tcplog and icmplog (i think).
They basically run raw sockets, check incoming packets for syn bits and
echo_reply requests and log the results. Considering, most of the stuff on
those discs was from sunsite of tx11, you'll should be able to pick them up
there.

d.

-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@vger.rutgers.edu