[KLUG Members] smoothwall questions

Andy members@kalamazoolinux.org
Sat, 2 Aug 2003 04:45:50 -0700 (PDT)


Ok.. I downloaded and installed the latest beta and
patches for smoothwall on an extra box. When I look at
the web inteface it has a log for the firewall showing
what IP's were blocked and what they were trying to
do. When I go into var/log and look at the messages
log I see other IP address that look to have connected
to the smoothwall box.. being fairly new to the whole
security side of linux (always been playing with the
workstation aspect because it was behind a
router/firewall already) is there a command that will
show me any file access or changes that happened since
the install. That and in the instance were I keep
getting hit by 1 IP that is scanning all the ports..
even now what would be a good way of dropping them or
should I just report that IP to the ISP that shows up
in Whois?

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com