RE: Log checking?

["Fiamingo, Frank" <FiamingF () strsoh org>]

I've always found that examing the logs for what was blocked from the
"inside" to be very helpful.  It often indicated a system that was
either misconfigured or infected, or to a clueless user.  

        Frank

> -----Original Message-----
> From: Paul D. Robertson [mailto:paul () compuwar net]
> ...
> I've always felt that worrying about denied traffic was mostly for sport-
> if the firewall's policy blocked it, I wasn't all that worried about much
> more than overall trends- what got *through* the firewall seemed to be the
> more interesting set of things.
> ...
> Paul
----------------------------------------------------------------------------
-
> Paul D. Robertson      "My statements in this message are 
> personal opinions
> paul () compuwar net       which may have no basis whatsoever in fact."
> probertson () trusecure com Director of Risk Assessment 
> TruSecure Corporation
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () honor icsalabs com
> http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards