> I created the rule on my firewall that e-mails me when somebody tries
> to connect ot specific port on specific server.
I hope your mail server has lots of free disk space ...
... but that aside, have you considered just logging them instead?
/var/log/port/23.log
/var/log/port/53.log
... or you could set up a log output that you could run through mrtg to see
which ports are most frequently scanned.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]