RE: [fw-wiz] Log checking?

From: Fiamingo, Frank (FiamingF_at_strsoh.org)
Date: 09/29/04

  • Next message: Attila Nagy: "[fw-wiz] SMTP forwarding question" 
    To: firewall-wizards@honor.icsalabs.com
Date: Wed, 29 Sep 2004 08:51:58 -0400

    I've always found that examing the logs for what was blocked from the
    "inside" to be very helpful. It often indicated a system that was
    either misconfigured or infected, or to a clueless user.

            Frank

    > -----Original Message-----
    > From: Paul D. Robertson [mailto:paul@compuwar.net]
    > ...
    > I've always felt that worrying about denied traffic was mostly for sport-
    > if the firewall's policy blocked it, I wasn't all that worried about much
    > more than overall trends- what got *through* the firewall seemed to be the
    > more interesting set of things.
    > ...
    > Paul
    >
    ----------------------------------------------------------------------------
    -
    > Paul D. Robertson "My statements in this message are
    > personal opinions
    > paul@compuwar.net which may have no basis whatsoever in fact."
    > probertson@trusecure.com Director of Risk Assessment
    > TruSecure Corporation
    > _______________________________________________
    > firewall-wizards mailing list
    > firewall-wizards@honor.icsalabs.com
    > http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    >
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards

  • Next message: Attila Nagy: "[fw-wiz] SMTP forwarding question"

    Relevant Pages

    • Re: [fw-wiz] Personal/Host-based Firewalls
      ... probably to use a tool that gives enough info in the logs that the logs ... Paul might prefer that you don't flood the ... stands an even better chance. ... Lively is good if it's discussion, and bad if it's just product advocacy, ...
      (Firewall-Wizards)
    • Re: Using Files from mapped drives
      ... Sorry Paul, I was a bit stressed out, however I did find a fix, and I ... The script didn't work, got an internet server error, log file says: ... Have you looked in your server logs? ...
      (perl.beginners)
    • Re: One user problem
      ... So if she logs into another users machine on the network and then tries to ... access OWA, does this work? ... > Dear Paul, ...
      (microsoft.public.exchange.admin)
    • Re: OT: Win Xp logon message ... huh?
      ... Paul wrote: ... Anyone got any idea what Microsoft mean by this? ... logs a user in - a single step which they oddly think will prevent ... capture your logon credentials for nefarious purposes. ...
      (uk.comp.os.linux)
    • Re: Platform Manager
      ... Thanks, again, Michael! ... I get the following in the logs on my ... If anyone can suggest what piece might be missing, what registry key might ... >> Paul T. ...
      (microsoft.public.windowsce.embedded.vc)