[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [ISSForum] Query Regarding RSKILL Option




    Hi Joel,

         The IDS is installed between router and firewall.The connection's
from IDS,Router and firewall are terminated on Hub.My question is how is TCP
session gets killed,when IDS is in stealth mode and traffic coming on IDS's
port on hub is also sent to port on which firewall is connected at same
time.Does Proventia send RST to all ports on Hub.Please clarify.


 Thanking you all in Anticipation.

  Regards

  Priyank Gaddala

-----Original Message-----
From: Joel Esler [mailto:esler@xxxxxxxxxxx]
Sent: Thursday, November 04, 2004 4:37 AM
To: priyank@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [ISSForum] Query Regarding RSKILL Option


RSKill attempts to send RST packets to each end of the connection  
effectively killing the connection.

Joel

On Nov 3, 2004, at 06:29, priyank@xxxxxxxxxxxxxxxxxxxx wrote:

>
>
>  Dear All,
>                 I have recently installed A201 Provetia in our  
> organization
> and have defined some basic policies.When defining policy there is an  
> option
> "RSKILL", does this option
> kill TCP connection.There is continous logging of  
> SQL_SLAMMER_WORM,because
> of this my log file is getting full,can i set it to  "RSKILL"  
> option.Any
> help would be appreciated
>
> Thanking You All In Anticipation.
>
>  Regards
>
>  Priyank Gaddala
>  Technical Consultant - Sytems Integration and Support
>  Tata Technologies Ltd
>
> *********************************************************************** 
> *****************************
> Email Disclaimer:
> Information contained and transmitted by this e-mail is  
> confidential,proprietary, and legally privileged data of Tata  
> Technologies that is intended for use only by the addressee.If you are  
> not the intended recipient, you are notified that any dissemination,  
> distribution, or copying of this e-mail is strictly prohibited.You are  
> requested to delete this e-mail immediately and notify the  
> originator.Any views expressed by an individual do not necessarily  
> reflect the view of Tata Technologies.While this e-mail has been  
> checked for all known viruses, the addressee should also scan for  
> viruses.Internet communications cannot be guaranteed to be timely,  
> secure, error or virus-free as information could be intercepted,  
> corrupted, lost, destroyed, arrive late or incomplete.Tata  
> Technologies does not accept liability for any errors or omissions.To  
> know more about Tata Technologiesplease visit  
> http://www.tatatechnologies.com
> *********************************************************************** 
> ****************************
>
> _______________________________________________
> ISSForum mailing list
> ISSForum@xxxxxxx
>
> TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to  
> https://atla-mm1.iss.net/mailman/listinfo/issforum
>
> To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx
>
> The ISSForum mailing list is hosted and managed by Internet Security  
> Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
>

****************************************************************************************************
Email Disclaimer:
Information contained and transmitted by this e-mail is confidential,proprietary, and legally privileged data of Tata Technologies that is intended for use only by the addressee.If you are not the intended recipient, you are notified that any dissemination, distribution, or copying of this e-mail is strictly prohibited.You are requested to delete this e-mail immediately and notify the originator.Any views expressed by an individual do not necessarily reflect the view of Tata Technologies.While this e-mail has been checked for all known viruses, the addressee should also scan for viruses.Internet communications cannot be guaranteed to be timely, secure, error or virus-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete.Tata Technologies does not accept liability for any errors or omissions.To know more about Tata Technologiesplease visit http://www.tatatechnologies.com
***************************************************************************************************

_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.