| View previous topic :: View next topic |
| Author |
Message |
orange2
Cadet
Joined: Sep 30, 2006
Posts: 5
Location: UK
|
 Posted: Tue Oct 31, 2006 9:10 pm Post subject: NIPS log |
|
|
I'm presently running a trial version of KPF v.4 and trying to get to understand it.
I've just noticed, having read the post by StarStuff recently, that there is a NIPS entry: Description -BAD-TRAFFIC tcpport0traffic
Source of attack-adsl-84-226-159-138.adslplus.ch
Action - permitted
Can somebody explain what on earth all that means!
If it was actually "bad" traffic why was it permitted?
|
|
| Back to top |
|
 |
Graham1
Captain
Joined: Dec 21, 2005
Posts: 340
|
| Posted: Tue Oct 31, 2006 9:47 pm Post subject: Re: NIPS log |
|
|
| orange2 wrote: | | Can somebody explain what on earth all that means! |
See link below:-
http://www.snort.org/pub-bin/sigs.cgi?sid=524
| Quote: | | If it was actually "bad" traffic why was it permitted? |
Check your nips settings (intrusion module). By default, SKPF4 permits low intrusions. You can change to deny but if this causes any problems, you can always change back again.
|
|
| Back to top |
|
|
orange2
Cadet
Joined: Sep 30, 2006
Posts: 5
Location: UK
|
| Posted: Tue Oct 31, 2006 9:56 pm Post subject: |
|
|
Thanks Graham1.
You led me into another tab which I hadn't previously investigated.
Also had a look at that website. To a newbie like me it's frightening!
|
|
| Back to top |
|
|
Graham1
Captain
Joined: Dec 21, 2005
Posts: 340
|
| Posted: Tue Oct 31, 2006 10:11 pm Post subject: |
|
|
| orange2 wrote: | | Also had a look at that website. To a newbie like me it's frightening! |
As long as you setup SKPF4 correctly, you shouldn't have anything to worry about.
|
|
| Back to top |
|
|
orange2
Cadet
Joined: Sep 30, 2006
Posts: 5
Location: UK
|
| Posted: Tue Oct 31, 2006 10:31 pm Post subject: |
|
|
Graham1, it's getting the firewall set up properly that's worrying me!
|
|
| Back to top |
|
|
Graham1
Captain
Joined: Dec 21, 2005
Posts: 340
|
|
| Back to top |
|
|
|
|
Forum FAQ
Search
Usergroups
Profile
Login to check your private messages
Login
. Any problems, post back.