Report message:*
 

Re: Protector update v3.41 and 3.5beta

Subject: Re: Protector update v3.41 and 3.5beta
by Vaughan on 2009/11/18 7:52:35

in regards to protector 3.41 and 3.5 beta.

the main differences are admin options for the various filters.

and

- added manipulation checker against ftp worms or silent raiders

now this new feature in 3.5

to quote gijoe

Quote:


http://www.viruslist.com/en/weblog?discuss=208187897&return=1

A notify system for such worms via FTP has just been implemented in Protector-3.50.

It checks mtime of XOOPS_ROOT_PATH and mtime/inode of XOOPS_ROOT_PATH/index.php

It works like a noisemaker in banks.

Though it cannot protect any manipulation of your site, you can avoid to scattering such worms from your site by the notifying mail.

Of course, the first priority must be "Keeping the client secure from such worm".

And it might be better "Watching sites by each other" than "Watching a site by myself" if we implement an observing system for servers.



it's a logging system which will only ever get proper testing in the field due it's nature of trying to log and catch these new types of ftp worms.. so my preference would be to go with the beta in this case.