Firewall / Network Monitoring

From: N. Hall (nospam5857)
Date: 02/14/04 

Date: Fri, 13 Feb 2004 23:04:06 -0500

Hi,

I am using several different programs for monitoring my Firewall & Network.
All of these programs allow for SMTP messages to be sent when certain
conditions are met.

My problem is that most conditions that I need to watch for (traffic on
common virus ports, devices failing to ping, etc.) when they occur, they
occur many times repeatedly, which generates an excessive amount of SMTP
emails.

My ultimate goal is to send the message to my cell phone, so receiving
hundreds of messages a minute (which is very likely to happen with these
port 135 type viruses) is not good.

Is there anybody out there doing this, and how do you contend with the
duplicate messages. I am trying to figure out some way around this, like
deleting the duplicates and keeping the original, but I can't think of an
easy way to do this.

FYI: I am using Lotus Notes for my email. The messages I am mainly
concerned with are coming from the Kiwi Syslog Daemon (originated from my
Cisco PIX).

Thanks for any suggestions.

Relevant Pages

  • Re: spool directory space check failed: space=0 inodes=246243
    ... Add space to your Firewall spooler? ... Why is your firewall holding on to the SMTP messages? ... > device) while receiving message from ... > How do i solve these errors so we can start receiving incoming emails... ...
    (microsoft.public.exchange.setup)
  • Re: Convert IPM.Post to IPM.Note
    ... There are also 3rd party software solutions. ... PR_MESSAGE_CLASS attribute of SMTP messages that are sent to public ... Is there a way to convert all the older IPM.Post emails to IPM.Note? ...
    (microsoft.public.exchange.admin)
  • Re: Convert IPM.Post to IPM.Note
    ... PR_MESSAGE_CLASS attribute of SMTP messages that are sent to public ... Is there a way to convert all the older IPM.Post emails to IPM.Note? ... email a@t leederbyshire d.0.t c.0.m ...
    (microsoft.public.exchange.admin)