Firewall Wizards mailing list archives

Re: How do you fight an attack in progress?

From: Neil Readwin <nreadwin () csksoftware com>
Date: Fri, 19 Sep 1997 16:50:45 -0400 (EDT)

Let's say that your firewall keeps sending you messages about a scan in
progress or something similar. [...] The firewall keeps paging you and
your adrenaline level grows exponentially.


If you have automated the detection of any given attack I would assume
that you have also fixed the problem it tries to exploit. Why worry
about it?

Reconfigure the firewall so that instead of paging you it mails you a
daily report on how well it did its job. Your stress level will go down
and both you and your HMO will be happier.

Just have the firewall page you when someone successfully gets in. If
that happens too frequently for your peace of mind then go out and buy
a better firewall. Neil.

Current thread:

How do you fight an attack in progress? Grigorof, Adrian (Sep 19)
- Re: How do you fight an attack in progress? Marcus J. Ranum (Sep 19)
- Re: How do you fight an attack in progress? Erik Van Riper (Sep 19)
- Re: How do you fight an attack in progress? Paul Ferguson (Sep 19)
- Re: How do you fight an attack in progress? Andy Howard (Sep 19)
  - Re: How do you fight an attack in progress? Paul Ferguson (Sep 20)
- Re: How do you fight an attack in progress? Neil Readwin (Sep 19)
  - Re: How do you fight an attack in progress? John Lines (Sep 23)
- Re: How do you fight an attack in progress? Mark Coleman (Sep 20)
  - Re: How do you fight an attack in progress? Joseph S. D. Yao (Sep 22)
- <Possible follow-ups>
- Re: How do you fight an attack in progress? Michele Mullins Jordan - Commercial SE-Sun-McLean VA (Sep 19)
- How do you fight an attack in progress? Grigorof, Adrian (Sep 19)
  - Re: How do you fight an attack in progress? Paul Ferguson (Sep 19)
  - Re: How do you fight an attack in progress? Rik Harris (Sep 23)