This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IRC

I tried to search for this but could not find any definitive information about this. I am getting hundreds of e-mails a day about this when I am connected to IRC. Is there a way to correct or disable this?

A packet was identified that may be part of an intrusion attempt.
The packet was detected by the Intrusion Detection system. The matching
rule classified this as highest priority level. The packet properties
and the alert reason are:

[1:1463:0] A CHAT IRC message [Classification: Potential Corporate Privacy Violation] [Priority: 1]:  {PROTO006} 69.12.31.52:6667 -> MyInternalIP:2315

--
Last WebAdmin login: admin at Wed Nov 10 19:47:02 from 10.1.1.10
System Uptime      : 34 days 10 hours 13 minutes
System Load        : 0.30
System Version     : Astaro Security Linux 5.026
License usage      : 5 of 10 users active

This thread was automatically locked due to age.

Parents

0 Stephan_Scholz over 20 years ago

The rule that triggers the alert simply tells you that somebody is doing IRC (you, in this case :-) ). This may be unwanted in some environments, and some administrators may want to set this to block. Since you are happy with IRC usage, simply disable the rule in the IPS rules overview (group: chat).

Regards,
Stephan
Cancel
Vote Up 0 Vote Down

Cancel
0 DemisE over 20 years ago in reply to Stephan_Scholz

Ahh it is just listed as chat. I could have swore that I allowed anything to go out just specified what was coming in. [:S]
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 DemisE over 20 years ago in reply to Stephan_Scholz

Ahh it is just listed as chat. I could have swore that I allowed anything to go out just specified what was coming in. [:S]
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data