How to enable port scans for specific address (or range) in psad?
By default I get a lot of logs coming from my own monitoring service. How can I tell psad to treat my addresses or domains as trusted ones?
I'd like to avoid adding them to the /etc/hosts.allow file.
Here's sample log file message:
Scanned UDP ports: [36604-53945: 3 packets, Nmap: -sU]
iptables chain: INPUT, 3 packets
Source: a.b.c.200
DNS: ns3-cache.example.com
Destination: a.b.c.185
DNS: my.machine.example.com