Hello,
Port attack? What exactly are you referring to, portscans?
Portsentry can deny on the fly hosts which portscan you. I am generally
inclined not to use portsentry, as port scans can easily be spoofed and
thus making a DoS attack against your host very very feasible.
Additional arguments follow:
* Snort has a port scan detection plugin, which suffices my needs.
* I normally do not care when people port scan me. The majority of break-in
attempts do not employ a full portscan prior to launching the attack but
rather focus on a single service.
Regards, Yotam Rubin
On Sun, May 27, 2001 at 06:37:29PM +0200, Eran Levy wrote:
> Hi,
> Is there any program that detects port attack and then running IPchains
> command to DENY/REJECT? I need a simple program.
>
>
> ----
> Regards,
> Eran Levy.
> E-mail: [EMAIL PROTECTED]
> WebSite: http://come.to/liloboot
>
>
> =================================================================
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
>
=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]
