Fedora Linux Support Community & Resources Center

Go Back   FedoraForum.org > Fedora 17/18 > Security and Privacy
FedoraForum Search

Forgot Password? Join Us!

Security and Privacy Sadly, malware, spyware, hackers and privacy threats abound in today's world. Let's be paranoid and secure our penguins, and slam the doors on privacy exploits.

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 11th June 2006, 09:35 PM
tonyingesson's Avatar
tonyingesson Offline
Registered User
 
Join Date: Jul 2005
Location: Lund, Sweden
Age: 31
Posts: 122
Portscan logs - public or concealed?

I have a hardware firewall (an old PC) with Snort protecting my LAN. It also doubles as a web server. I was thinking of having it print the portscan.log document generated by Snort (actually I set cron to copy the portscan.log every 30 minutes into a text file in another directory), thus making the contents of portscan.log accessible from any web browser. I thought it could be a convenient way of keeping an eye on my firewall when I'm not at home. However, since I'm not that well-versed in the ways of security I thought I'd ask you if there's any potential security hazard in making the contents of said document public like that?
Reply With Quote
  #2  
Old 11th June 2006, 09:49 PM
tebbens Offline
Registered User
 
Join Date: Aug 2005
Posts: 290
Is it public, where anyone can view it ?
If so, password protect it.... Apache has options for that.

Its always a security risk to give out ANY information about your setup, expecially security logs !
Reply With Quote
  #3  
Old 12th June 2006, 11:47 PM
tonyingesson's Avatar
tonyingesson Offline
Registered User
 
Join Date: Jul 2005
Location: Lund, Sweden
Age: 31
Posts: 122
One of the points was to be able to show my neighbours that there's a lot of portscanning activity targeting computers in this area, as a way to encourage them to improve their protection. So if there's no strong incentive to conceal the data in question I'd prefer to make it public. After all, it only shows the IP & port of the attacker and IP & port of the potential victim along with the time, nothing else.
Reply With Quote
Reply

Tags
concealed, logs, portscan, public

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
How to configure snort to detect portscan?? mickey12 Security and Privacy 0 24th April 2009 07:18 PM
Convert Apache-logs to IIS-logs locodude Servers & Networking 3 29th November 2007 05:55 PM
auto block ips that portscan? Wiles Security and Privacy 1 7th November 2007 05:27 PM


Current GMT-time: 18:09 (Sunday, 19-05-2013)

TopSubscribe to XML RSS for all Threads in all ForumsFedoraForumDotOrg Archive
logo

All trademarks, and forum posts in this site are property of their respective owner(s).
FedoraForum.org is privately owned and is not directly sponsored by the Fedora Project or Red Hat, Inc.

Privacy Policy | Term of Use | Posting Guidelines | Archive | Contact Us | Founding Members

Powered by vBulletin® Copyright ©2000 - 2012, vBulletin Solutions, Inc.

FedoraForum is Powered by RedHat