[Dshield] Sonicwall / Netgear...

Robert Stahl rstahl at acm.org
Mon Nov 5 01:29:55 GMT 2001


Johannes B. Ullrich  said: I would be interested in looking at the emails to
see if we
can support them (Netgear routers) like the SonicWall emails. Attached is
last night's log from the router. A couple of alerts are attached, too, but
they seem rather limited - nothing new.

	Bob

===================
Bob Stahl
rstahl at acm.org

-----Original Message-----
From: dshield-admin at dshield.org [mailto:dshield-admin at dshield.org]On
Behalf Of Mark Challender
Sent: Friday, November 02, 2001 20:21
To: 'dshield at dshield.org'
Subject: RE: [Dshield] Sonicwall / Netgear...



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Make a group that includes the sonicwall at dshield.org and your own
address so you can continue to get logs.  Put that group email
address in the proper field in the SonicWall's log setting.

Mark Challender
Network Administrator

Serious error.
All shortcuts have disappeared.
Screen. Mind. Both are blank.

- -----Original Message-----
From: Johannes B. Ullrich [mailto:jullrich at euclidian.com]
Sent: Friday, November 02, 2001 5:32 AM
To: dshield at dshield.org
Subject: [Dshield] Sonicwall / Netgear...


- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Hi.

  A quick notice about Sonicwall and Netgear routers. They both
have the ability to email an administrator about "policy violations".

  For sonicwall logs, you can send them directly to
'sonicwall at dshield.org' to have them included. The Sonicwall setup
should
allow you to manipulate the Subject line of this email. Set it to
show
your userid.

  This feature is still somewhat experimental. So let me know how it
goes.

Netgear:

  Some Netgear routers appear to have a similar feature. Does anyone
own
one? If so, I would be interested in looking at the emails to see if
we
can support them like the SonicWall emails.


- - --
- - -------
jullrich at sans.org                    Join http://www.DShield.org
                          Distributed Intrusion Detection System

- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE74qBVVOIizK5pIDMRArxgAJ9ofbZyKLM7Wg2I7YKA1e579PcF9ACfRgIT
njr/FTsmEiZEdqn7vogvyz8=
=7HLz
- -----END PGP SIGNATURE-----

_______________________________________________
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:
http://www1.dshield.org/mailman/listinfo/dshield

-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 7.0.3 for non-commercial use <http://www.pgp.com>

iQA/AwUBO+NGaN5aUxficepaEQJfBgCgpW++sgu8NswT3xEklTT4Aha4B/8AoK9H
ZHBGI1IJ/8R8Hw6Utf2XqJxW
=nmT+
-----END PGP SIGNATURE-----

_______________________________________________
Dshield mailing list
Dshield at dshield.org
To change your subscription options (or unsubscribe), see:
http://www1.dshield.org/mailman/listinfo/dshield
-------------- next part --------------
An embedded message was scrubbed...
From: rstahl at acm.org
Subject: Log file from NETGEAR [0030AB04B14E]
Date: Sun, 04 Nov 2001 01:00:02 -0500
Size: 1726
Url: http://www.dshield.org/pipermail/list/attachments/20011104/218953d4/attachment.eml
-------------- next part --------------
An embedded message was scrubbed...
From: rstahl at acm.org
Subject: *** Alert from NETGEAR *** [0030AB04B14E]
Date: Thu, 01 Nov 2001 16:38:12 -0500
Size: 616
Url: http://www.dshield.org/pipermail/list/attachments/20011104/218953d4/attachment-0001.eml
-------------- next part --------------
An embedded message was scrubbed...
From: rstahl at acm.org
Subject: *** Alert from NETGEAR *** [0030AB04B14E]
Date: Thu, 01 Nov 2001 16:34:08 -0500
Size: 617
Url: http://www.dshield.org/pipermail/list/attachments/20011104/218953d4/attachment-0002.eml
-------------- next part --------------
An embedded message was scrubbed...
From: rstahl at acm.org
Subject: *** Alert from NETGEAR *** [0030AB04B14E]
Date: Thu, 01 Nov 2001 16:17:44 -0500
Size: 617
Url: http://www.dshield.org/pipermail/list/attachments/20011104/218953d4/attachment-0003.eml
-------------- next part --------------
An embedded message was scrubbed...
From: rstahl at acm.org
Subject: *** Alert from NETGEAR *** [0030AB04B14E]
Date: Thu, 01 Nov 2001 16:16:38 -0500
Size: 617
Url: http://www.dshield.org/pipermail/list/attachments/20011104/218953d4/attachment-0004.eml
-------------- next part --------------
An embedded message was scrubbed...
From: rstahl at acm.org
Subject: *** Alert from NETGEAR *** [0030AB04B14E]
Date: Thu, 01 Nov 2001 15:59:41 -0500
Size: 617
Url: http://www.dshield.org/pipermail/list/attachments/20011104/218953d4/attachment-0005.eml


More information about the list mailing list