>On Friday 05 January 2007 2:44 pm, Tim Heagarty wrote: >> I've seen a few references here to scripts that monitor attacks and >> dynamically update iptables rules to knock down the attacks. Can anyone >> provide some good research starting points or sample scripts that they use? >> I've found a few things with google but respect the collective out here >> much more. > >Something like psad (www.cipherdyne.com/psad/)? Or http://lkml.org/lkml/2006/12/31/127 http://lkml.org/lkml/2007/1/1/34 http://lists.netfilter.org/pipermail/netfilter/2005-June/061254.html http://lists.netfilter.org/pipermail/netfilter/2005-June/061328.html -`J' --
