Can psad automatically block IP addresses that have scanned my system?
psad has the capability of automatically blocking IP addresses with both iptables and/or tcpwrappers. Furthermore, psad can be configured to only block an IP after it has reached a certain danger level which the admin defines. The two relevant configuration variables in the /etc/psad/psad.conf file are “ENABLE_AUTO_IDS” and “AUTO_IDS_DANGER_LEVEL”. Note that the auto blocking feature is disabled by default; please see the next question.
Related Questions
- IF THE SUBMITTED DIGITAL IMAGES DO NOT CONFORM TO THE SPECIFICATIONS, THE PROCEDURES STATE THAT THE SYSTEM WILL AUTOMATICALLY REJECT THE E-DV ENTRY FORM AND NOTIFY THE SENDER. DOES THIS MEAN I WILL BE ABLE RE-SUBMIT MY ENTRY?
- How can the SuperFlush System really flush the engine without running it? Won the thermostat block part of the engine?
- VirtualDrive automatically plays a VCD at system startup. How can I stop the auto-play?
