Package: psad
Version: 1.4.3-1
Severity: wishlist

Hi,

I started receiving reports of port scans being performed by Freenode's
open proxy scanner.  That in itself is a good thing since psad is
supposed to be detecting all of those.  However I believe that a lot of
Debian users (irc is not unpopular a lot of us) would prefer not to be
notified whenever freenode scans their machine.

The following line in /etc/psad/auto_dl will ignore all traffic from the
Freenode proxy scan:

  82.96.96.0/24   0; # please.read.http.proxyscan.freenode.net

I'm not sure what the default should be, but it would be nice if that
line was at least commented-out in /etc/psad/auto_dl with an explanation
like "Uncomment the next line to ignore the Freenode open proxy scan".

Also, a note in README.Debian might be useful since the purpose of the
"auto_dl" file is not immediately obvious from the filename (I was
looking for something like "whitelist").

Thanks,

Francois


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to