RE: [Declude.JunkMail] **OT** Intrusion Detection Software

2004-02-04 Thread Jim Priest
http://www.snort.org/

Jim


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sharyn Schmidt
Subject: [Declude.JunkMail] **OT** Intrusion Detection Software


I have been asked to research Intrusion Detection Software. 
Anyone have any suggestions? 
Sharyn 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] **OT** Intrusion Detection Software

2004-02-04 Thread DLAnalyzer Support
Snort... 

darrell 

Sharyn Schmidt writes: 

I have been asked to research Intrusion Detection Software. 

I have done a Google search, but most of what I see is an actual
appliance. 

All I am looking for is software that will notify me when something
suspicious attempts to hit our network. 

Anyone have any suggestions? 

Sharyn



Check Out DLAnalyzer a comprehensive reporting tool for
Declude Junkmail Logs - http://www.dlanalyzer.com 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] **OT** Intrusion Detection Software

2004-02-04 Thread Sharyn Schmidt

http://www.snort.org/


Thanks!

Checking it out as we speak.

Sharyn


We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at the annual
San Francisco Wine and Spirits Championships. For
more information, please click (go to) htmla 
href=http://www.cruzanrums.com;www.cruzanrums.com/a/html
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] **OT** Intrusion Detection Software

2004-02-04 Thread Michael Jaworski
Title: Message



Anyone 
rig Win version of Snort to work with Declude for dictionary attacks??? To 
flag an IP with a dictionary attack profile and let Declude or iMail refuse the 
traffic for a period of time. We have one domain with just 350 e-mail acccounts 
being pounded daily with dictionary attacks by different sources resulting in 
about 10k spam messages. Even though they are often listed in Spamcop or ORDB 
each message still needs to processed. 

Michael JaworskiPuget Sound 
Network, 
Inc.(206)217-0400(800)599-9485


Re: [Declude.JunkMail] **OT** Intrusion Detection Software

2004-02-04 Thread Russ Uhte \(Lists\)
At 10:02 AM 2/4/2004, Sharyn Schmidt wrote:

I have been asked to research Intrusion Detection Software.

I have done a Google search, but most of what I see is an actual appliance.

All I am looking for is software that will notify me when something 
suspicious attempts to hit our network.

Anyone have any suggestions?

Sharyn
As other's have already suggested, Snort.  It is by far the best.  It will 
easily run on either *nix or windows.  I ran it on windows for about 6 
months, and then decided it would be easier to keep updated on a *nix 
platform.  I found FreeBSD to be the best option for me. YMMV.

-Russ

---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.