TO UNSUBSCRIBE: email "unsubscribe issforum" in the body of your message to [EMAIL PROTECTED] Contact [EMAIL PROTECTED] for help with any problems! ----------------------------------------------------------------------------
Which RealSecure component are you using? With a network sensor you could do connection events for public IP ranges destined for that internal server and kill them with the RSKill. That could increase network traffic a lot though. With the RealSecure Server Sensor you can use the firecell rules to allow or deny traffic inbound to the server at the server level based on an 'any' or 'exempt', etc. Brian Fitch Systems Engineer Internet Security Systems, Inc. -----Original Message----- From: Laurent Michaux [mailto:[EMAIL PROTECTED]] Sent: Tuesday, July 16, 2002 2:40 PM To: [EMAIL PROTECTED] Subject: Connection Event and Filters with Realsecure 6.0 Is it possible to kill connections from internet to an internal server? (Is it possible to define "any exept my network") Usually, only a internal host is allowed to connect. And i want to log this connection, and not match signatures. If i defined both Connection Event and Filter, are Connections Event matched? _________________________________________________________ Envoyez des messages musicaux sur le portable de vos amis http://mobile.lycos.fr/mobile/local/sms_musicaux/
