Re: Rootkit discovery tools

[Jeni Li <jeni.li () ASU EDU>]

> I've seen a *really* slick iptables-only script that blocks 
> access to the SSH
> port until packets were received for certain other ports in a specific
> order...
>
> http://www.debian-administration.org/articles/268


Ooh, this is it! Thank you!
j