Michael Rash, Security Researcher

Software Release - psad-1.4.4

The 1.4.4 release of psad is ready for download. Here is an excerpt from the ChangeLog:
  • Added MAC address reporting in psad email alerts. This feature is enabled via a new config keyword "ENABLE_MAC_ADDR_REPORTING".
  • Added --fw-rm-block-ip option to allow IP addresses to be removed from the auto-blocking chains from the command line.
  • Updated command line firewall arguments to write commands to the AUTO_IPT_SOCK domain socket.
  • Added the ability to specify ports and port ranges to auto_dl file.
  • Added --force-mod-install command line argument to installer to force perl modules used by psad to be installed within /usr/lib/psad regardless of whether they already exist in the system perl tree.
  • Bugfix for psad repeatedly trying to remove the same IP address(es) from the auto-blocking chains.