[EUG-LUG:1070] Re: network questions: understanding portsentry

[Ben Barrett]

Bob Miller wrote:

>Christopher Maujean wrote:
>
>>I was under the impression that you can configure portsentry to never
>>blacklist from certain hosts, no matter what they do.
>>
>
>Yeah, but there are thousands of useful hosts out there.  (Think how
>many sites you've surfed in the last week.)  Do you really want to
>maintain a static IP list of all of them?
>
AFAIK, the default setup of portsentry is to NOT blacklist hosts 
immediately;
it seems the default configuration does not hose itself!  I was indeed 
able to repeatedly
nmap my local box without being blocked, so my setup was not adding chains.
I guess it's just uses cycles for "informative" purposes...