iis security:
I am looking for a good piece of software, free (freeware) is best, cheap is good, expensive is BAAAAD. :) All I need the tool to do is this: * Install and sit on a Windows 2003 server. * Monitor ports 25, 110, 80, 21, 20 * Record a log file of every IP address accessing the above ports with a timestamp * Send an email to administrator once an hour with a complete log of the above. * Without significantly slowing down the server or using a lot of CPU/RAM. Does anyone know of such a gem? -- Reply to group. Thanks!
Apparently not or I wouldn't be asking for it :) [quoted text, click to view] "Jeff Cochran" <jcochran.nospam@naplesgov.com> wrote in message news:40c77505.606270050@msnews.microsoft.com... > On Thu, 27 May 2004 14:53:08 -0700, "AOrlando" <imloving@the.spam> > wrote: > > >I am looking for a good piece of software, free (freeware) is best, cheap is > >good, expensive is BAAAAD. :) > > > >All I need the tool to do is this: > >* Install and sit on a Windows 2003 server. > >* Monitor ports 25, 110, 80, 21, 20 > >* Record a log file of every IP address accessing the above ports with a > >timestamp > >* Send an email to administrator once an hour with a complete log of the > >above. > >* Without significantly slowing down the server or using a lot of CPU/RAM. > > > >Does anyone know of such a gem? > > Wouldn't this be in your firewall logs already anyway? > > Jeff
Turn on the firewall that comes with Server2003. Configure it to permit all the traffic you want, then setup a batch job to rotate and e-mail the firewall logs. [quoted text, click to view] "AOrlando" <imloving@the.spam> wrote in message news:10bcoppoj0oi3d2@news.supernews.com... > I am looking for a good piece of software, free (freeware) is best, cheap is > good, expensive is BAAAAD. :) > > All I need the tool to do is this: > * Install and sit on a Windows 2003 server. > * Monitor ports 25, 110, 80, 21, 20 > * Record a log file of every IP address accessing the above ports with a > timestamp > * Send an email to administrator once an hour with a complete log of the > above. > * Without significantly slowing down the server or using a lot of CPU/RAM. > > Does anyone know of such a gem? > > -- > Reply to group. Thanks! > >
On Thu, 27 May 2004 14:53:08 -0700, "AOrlando" <imloving@the.spam> [quoted text, click to view] wrote: >I am looking for a good piece of software, free (freeware) is best, cheap is >good, expensive is BAAAAD. :) > >All I need the tool to do is this: >* Install and sit on a Windows 2003 server. >* Monitor ports 25, 110, 80, 21, 20 >* Record a log file of every IP address accessing the above ports with a >timestamp >* Send an email to administrator once an hour with a complete log of the >above. >* Without significantly slowing down the server or using a lot of CPU/RAM. > >Does anyone know of such a gem?
Wouldn't this be in your firewall logs already anyway?
On Thu, 27 May 2004 18:10:48 -0700, "AOrlando" <imloving@the.spam> [quoted text, click to view] wrote: >Apparently not or I wouldn't be asking for it :)
Do you actually have a firewall in front of your server ? If so, whose is it and are there any log analyser programs out there for it ? Regards, Paul Lynch
On Thu, 27 May 2004 18:10:48 -0700, "AOrlando" <imloving@the.spam> [quoted text, click to view] wrote: >Apparently not or I wouldn't be asking for it :)
Strange firewall then. I don't know of any free/cheap tools that do all of this, but an IDS such as Snort should be able to be configured for most of it. Jeff [quoted text, click to view] > >"Jeff Cochran" <jcochran.nospam@naplesgov.com> wrote in message >news:40c77505.606270050@msnews.microsoft.com... >> On Thu, 27 May 2004 14:53:08 -0700, "AOrlando" <imloving@the.spam> >> wrote: >> >> >I am looking for a good piece of software, free (freeware) is best, cheap >is >> >good, expensive is BAAAAD. :) >> > >> >All I need the tool to do is this: >> >* Install and sit on a Windows 2003 server. >> >* Monitor ports 25, 110, 80, 21, 20 >> >* Record a log file of every IP address accessing the above ports with a >> >timestamp >> >* Send an email to administrator once an hour with a complete log of the >> >above. >> >* Without significantly slowing down the server or using a lot of >CPU/RAM. >> > >> >Does anyone know of such a gem? >> >> Wouldn't this be in your firewall logs already anyway? >> >> Jeff >
Don't see what you're looking for? Try a search.
|