Re: [cobalt-security] Portsentry - config changes, help needed!

[Audric Leperdi <aleperdi@xxxxxxxxxxxxx>]

> "marcus miller" <cobalt_security_list@xxxxxxxxxxx> wrote:
> > I have made a few changes to the default config in portsentry, removed a
> > couple of ports from the 'Port Configuration' section as I am tired of
> > logcheck sending me 'Active System Attack' heading that can not be
> ignored.
> >
> > I have killed the two processes that were running for portsentry and
> > restarted them again yet I am still receiving reports for scans on the
> > unwanted ports.
> >
> > /usr/local/psionic/portsentry/portsentry -tcp
> > /usr/local/psionic/portsentry/portsentry -udp
> >
> > Can anyone tell me how to restart portsentry so it takes changes to the
> > config file into configuration?

look into your cron dirs (/etc/cron*) for a symbolic link to logcheck and
remove it.

Audric