Re: Attention Portsentry Users. I need some advise puhleez....

[Alan Mead <adm ipat com>]

At 09:33 AM 12/8/99 -0500, Michael H. Warfield wrote:

>	Be very VERY careful with udp mode.  If someone figures out that
>you are doing that, they can spoof in carefully crafted UDP scans (src
>address on UDP can be faked and spoofed) as if they were coming from
>something like all the root name servers, and you are then toast.

Couldn't you solve this by dropping your name servers into sentry's ignore
file?
---
Alan D. Mead  /  Research Scientist  /  adm ipat com
Institute for Personality and Ability Testing
1801 Woodfield Dr  /  Savoy IL 61874 USA
217-352-4739 (v)  /  217-352-9674 (f)