Re: Portsentry and iptables

[Chuck Mead <csm MoonGroup com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 28 Sep 2001, Bill Johnson posted the following:

BJ>I am running RH 7.1, and have iptables running via Firestarter.   I also
BJ>have Portsentry running.  Is there any reason why I need Portsentry?  I
BJ>ask because it is eating a huge percentage of CPU, and spewing out tons of
BJ>messages.  With iptables in place, is it giving me any extra protection or
BJ>is it just redundant?

What it is is misconfigured. Portsentry doesn't eat tons of CPU unless 
it's processing tons of intrusion attempts. I seriously suspect your 
config is broken for your environment.

- -- 
csm
Free Dmitry!
Boycott Adobe!
Repeal the DMCA!
Stop the SSSCA!
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iEYEARECAAYFAju03tMACgkQv6Gjsf2pQ0qjWgCgtPj0rDmCmv8GI7B/7+nOUq0w
4/8AoKslTaoVkukQwI9BjzV/h6TKCpsC
=vAfM
-----END PGP SIGNATURE-----