IDSA
IDSA is an integrated access control, logging and IDS system for applications. It can be downloaded from http://jade.cs.uct.ac.za/idsa/
FK includes IDSA instrumentation for the pop and ftp proxy, making it possible to implement fine grained access control policies.
Example rules which can be added to idsad.conf
- Disallow deletion of mail messages on weekends:
%time wday saturday, sunday & scheme fk & service pop & name DELE: deny
- Only allow anonymous mpeg downloads between midnight and 5am and log transgressors:
scheme fk & service ftp & ! %time hour 0,1,3,4 & name RETR & %regex filename "mpe?g" & (username:string ftp | username:string anonymous) : deny ; log file /var/log/denied-downloads
$Id: README.idsa,v 1.1 2001/10/25 15:45:13 matthew Exp $