Does anyone know if there is a way to have your firewall do a finger on the
user who is attempting to connect to your service? As I see it, the only
problem would be determining the user name of the callee since that doesn't
appear to be sent to the host. Any ideas on how to program this? Perhaps
just a simple fingering of the site and logging that to a file would be
sufficient. That way if the firewall was attacked, you could contact the
sysadmin of the calling host and forward on a list of users that were logged
in (and non-idle) and the time of the attack.
Ideas?
------------------------------------------------------------------------------
Michael D. Ferioli Design & Disaster Recovery Consulting
Special Projects Consultant Suite 300
ferioli @
disaster .
com 9 Elm Street
Albany, NY 12202
info @
disaster .
com
Follow-Ups:
|
|
