Monitoring tous pantes kai ta panta

[Polychronis Ypodimatopoulos]

On Thursday 19 May 2005 23:36, Effie Mouzeli wrote:
>  Sorry for asking, alla, poio einai to nohma na parakoloutheis ola ta
> connections tou lan? Yparxei kamia periptwsh na eisai apo panw 24/7 kai na
> blepeis poios vlepei ti? 

Theleis na peis oti ta logs sou esu ta parakoloutheis kathimeni apo pano kai 
koitontas ta?

> kaneis? To polu polu na kopseis to connection th mia fora, next time omws
> den einai aparaithto oti tha to deis. OUte to na piaseis ton user JohnDoe
> kai na tou peis "Kserw ti evlepes sto internet/ ti katebazes exthes" einai
> lush. Leave the poor users alone.

Gia auta pou anafereis uparxoun oi proxies kai de me aforoun giati polu apla 
den exo users gia na parakolouthiso! :-)))

>  Ean to firewall/gateway/whatever sou mprosta einai entaksei kai ta
> workstations throun kapoious tupikous kanones asfaleias (ean einai auto to
> problhma sou dhladh) - Antivirus, updates px. - den uparxei kan logos na
> asxolhtheis me to zhthma. Ean to prob sou den einai h asfaleia, tote me olh
> thn eugenia sou lew oti h lista den einai b.o.f.h. guide.
>

Euxaristo polu gia ta sxolia sou alla i periptosi mou einai teleios asxeti.
En merei exei na kanei me asfaleia kai en merei me network debugging.
De iksera oti eprepe na eksigo giati rotao auto pou rotao, alla tha sou 
eksigiso. Exo mia seira apo servers (on the inside) kai mia seira apo clients 
(on the outside). Tora pou to skeftomai, kat'auti tin enoia exo ontos 
kapoious "users" kai go... mi meino kai paraponemenos e? :-))))
Mono pou de me noiazei an blepoun tsontes giati den anikoun sto diko mou 
diktuo!

Gia na prosomoioso kai na testaro tis diktuakes efarmoges pou prosfero exo ena 
gateway piso apo ton opoio einai oi servers mou kai kapoious dummy clients 
pou xrisimopoioun tis diktuakes efarmoges. Se auti ti fasi thelo na do poios 
sundethike pou kai me poia seira. O gateway mou fainetai san ena logiko 
simeio apo to opoio tha mporousa na to parakolouthiso auto, apo to na pao se 
kathe ena server ksexorista kai meta na prepei na sunduaso logs.

Prin arxiso na grafo scripts, na anakataeuo conntrack, tcpdump kai iptables 
(pera apo snat/dnat) eipa na rotiso ti lista an exei kati kapoios idi. 

Feeling better now?

Isos to subject na itan misleading kai giauto zito sugnomi.

Polychronis

YG. To b.o.f.h. den to eixa ksanakousei!!! :-)