<html>
<head>
<style type="text/css">
<!--
body { margin-left: 4px; line-height: normal; margin-right: 4px; margin-bottom: 1px; margin-top: 4px; font-variant: normal }
-->
</style>
</head>
<body style="margin-left: 4px; margin-right: 4px; margin-bottom: 1px; margin-top: 4px">
<DIV> Tim,
</DIV>
<DIV> </DIV>
<DIV>If you are interested, I belive that I can help you out. I do security, best practice,
</DIV>
<DIV>and Linux consulting for Alliance Technologies. If you are interested, give me
</DIV>
<DIV>a call, and we can discuss how much assistance you need, what levels of security
</DIV>
<DIV>are important to you, and how best we can help you.
</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV><br><br><br>-- <br>-Josh More, RHCE, CISSP, NCLP <br> morej@alliancetechnologies.net <br> 515-245-7701<br><br>>>>tim@perdue.net 12/09/05 3:32 pm >>><br>Aaron Porter wrote:<br>>On 12/9/05, *Nathan C. Smith* <smith@ipmvs.com <mailto:smith@ipmvs.com>><br>>wrote:<br>><br>>    Anyone use anything?  I'm not sold on the concept - maybe I don't<br>>    understand<br>>    it.  If you lock everything down it shouldn't be an issue should<br>>    it?  Don't<br>>    you want to know about new attacks that were/are successful?<br>><br>><br>>If a bank locks their vault at night, why have a security camera? IDS<br>>software can be really nice to keep an eye on your network; even if<br>>there is no hacking. I've run both Snort and Bro. Snort was nice because<br>>it was incredibly well supported and very well documented. Bro<br>>(http://bro-ids.org/) is nice because rather than matching an exploit<br>>string can watch for a regex, but the most valuable feature to me is<br>>that it watches for "strange" traffic. SMTP/ssh/etc on odd ports,<br>>strange tcp connection patterns, etc. Sometimes it sends me scrambling<br>>after a Skype user by accident, but it does a pretty good job of<br>>filtering alerts.<br><br>Does anyone locally do some consulting on this sort of stuff? I have 4<br>public-facing servers that I would like to have someone evaluate and<br>lock down to some extent.<br><br>Tim<br><br>Cialug mailing list<br>Cialug@cialug.org<br>http://cialug.org/mailman/listinfo/cialug<br> </DIV>
</body>
</html>