Radius Backed ACL

Published on June 14, 2009

Status: 0% I run OSSEC almost everywhere - it is one of my favourite software packages. I'm running it at home on my tiny "server", which works great. If somebody scans me, I know. I would ultimately like to be able to block them at the gateway. Because ... Read more.

True Consolidation

Published on April 13, 2009

Back in 2000 I managed to acquire several retired systems to bring to Uni: this included 4-5 cheap P120 machines. At the time, I thought this was great; I had an OpenBSD box as my gateway, a FreeBSD box, a few Linux boxes, and likely something else that doesn't even ... Read more.

Charting the Hackers

Published on Dec. 28, 2008

A normal internet connection gets attacked, a lot. The majority of attacks are of the form "hello, anybody there?" -- where most people just don't answer. But sometimes, just sometimes, the question gets an answer. Depending on the answer, the attacker will start to explore. A few weeks back I ... Read more.

Integrating OSSEC with Cisco IOS

Published on Nov. 15, 2008

I rank OSSEC as one of my favorite pieces of open source software, and finally decided to play around with it more in my own free time. (Yup, I do this sort of stuff for fun). My goal was quite simple: send syslog packets from my Cisco to my "proxy" ... Read more.