Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security ISSForum
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

[ISSForum] DROP:Connection response is not supported

from [Javier Reyna Padilla] Network Security [Permanent Link]
Subject: [ISSForum] DROP:Connection response is not supported
Date: Wed, 06 Apr 2005 13:34:31 -0500
Hello, I am new in the list, an I have a little question, I have a Proventia G100, I derive and edit a new policy from Attacks and Audits, Im blocking some signatures like TCP_Probe_Trojan, TCP_Probe_Other, and select the drop connection o connectionwith reset... I see a lot of these messages on /var/log/messages

Do you know if theres is dcumentation for specific drop configuration for signatures? Or how do I block these signatures?

Apr 6 09:21:05 djinn packetlib[698]: (djinn) - DROP:Connection response is not supported for TCP_Probe_POP3 event
Apr 6 09:34:26 djinn packetlib[698]: (djinn) - DROP:ConnectionWithReset response is not supported for TCP_Probe_Other event
Apr 6 09:41:44 djinn packetlib[698]: (djinn) - DROP:Connection response is not supported for TCP_Probe_Trojan event


Regards!

--
Saludos


------------------------------
Javier Reyna Padilla

Depto. de Seguridad
Onlinet S.A. de C.V.
Oficina: 5586-2613 Ext: 112
Cel: 04455-19236928
http://www.onlinet.com.mx
------------------------------

_______________________________________________
ISSForum mailing list
ISSForum@iss.net

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@iss.net

The ISSForum mailing list is hosted and managed by Internet Security Systems, 
6303 Barfield Road, Atlanta, Georgia, USA 30328.

[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  RE: [ISSForum] tempdev and templog full, Hernandez, Marco
Next by Date:  RE: [ISSForum] Internet Scanner SP2 problems, Truitt, Paul W.
Previous by Thread:  [ISSForum] Internet Scanner SP2 problems, SN ORT
Next by Thread:  RE: [ISSForum] DROP:Connection response is not supported, Palmer, Paul \(ISSAtlanta\)
Indexes:  [Date] [Thread] [Top] [All Lists]