RE: **RealSecure 5.0 & E-Mail Alerts**

[Filacchione, Alex (ISSAtlanta)]

TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any problems!
----------------------------------------------------------------------------

It all depends on the setup.

If you have an engine/sensor in stealth mode and it is connected to a
console via a "private link" (like a crossover cable or something) and that
console is connected to NO OTHER MACHINES other than the engine/sensor
machine, then you are out of luck.  That's the trade off... total security
for convenience/functionality!

If the console is connected to some other network, you could send the email
to a machine (mail server, etc.) on that (other) network.  Just make sure
that the paths or routes from the engine to that network or subnet that the
email server is on are configged to pass through the console machine as a
gateway of sorts.

See the route add command on NT if that's what the engine is running, and
use teh console machine as the gateway to the other network.  Adapt teh same
routing games to your Solaris, etc. box if the engine/sensor is not running
on NT.

Hope this helps,

Alex F
[EMAIL PROTECTED]

-----Original Message-----
From: Matthew F. Caldwell [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, August 02, 2000 3:04 PM
To: Mark S. Velasquez
Cc: [EMAIL PROTECTED]
Subject: Re: **RealSecure 5.0 & E-Mail Alerts**



TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to
[EMAIL PROTECTED]  Contact [EMAIL PROTECTED] for help with any
problems!
----------------------------------------------------------------------------


Hello Mark, 

        You could change your sendmail configuration on your solaris
engine to forward all mail to your console host. Of course you would need 
to setup some type of mail server on the console. Or use the
customizable scripting functions of ISS Realsecure to create a script that
runs on your engine and is piped to the console. I have written a few
scripts that perform these functions. Let me know if you need any more
help. 

Matthew F. Caldwell, CISSP - Senior Consultant
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
 Guarded.Net - An Information Security Company
 connect(); to the future of secure computing!
      Email: [EMAIL PROTECTED] 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
          http://www.guarded.net
---------------------------------------------------------------------------
This e-mail may contain proprietary commercial information and is intended
for the addressed recipient(s) only.  If you are not an addressed
recipient of this e-mail and have received it in error, you must delete
it.  You may not forward or disseminate information contained in this
e-mail without permission from Guarded.Net.  
Questions? Contact [EMAIL PROTECTED]
---------------------------------------------------------------------------