[Gllug] Intrusion detection rates

[Russell Howe]

On Fri, May 27, 2005 at 09:01:50AM +0100, Chris Bell wrote:
> Hello,
>    I have just installed an IPCop box on a BT-connect ADSL line which is
> reporting far more intrusion attempts than I see on my Demon ADSL connection
> (same speed). Is this pure chance? As far as I know BT do not filter, while
> Demom use Brightmail spam filtering but not anti-virus.

Intrusion attempts and viral emails (or spam emails) are seperate.

IPcop will be reporting trojaned/cracked/hacked/etc boxes scanning your
IP address(es) for vulnerabilities to exploit. I guess the BT address
ranges are just more popular than the Demon ones (either that or demon
does packet filtering of some sort...)

-- 
Russell Howe       | Why be just another cog in the machine,
rhowe at siksai.co.uk | when you can be the spanner in the works?
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug