On Tue, Apr 01, 2003 at 04:15:55PM +0200, Philipp Buehler wrote:
> [list added again, I think this is public interest and should be archived]
>
> On 01/04/2003, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote To [EMAIL PROTECTED]:
> > I just wanted to drop all nmap and/or other harmful packets... I found half
> > of this list of flags @ nmap's forums by a guy saying which to block to stop
> > nmap, the other half I found on a sans.org site... I'll try to dig up a link
> > if you want it. Which flags do you recommend blocking?
# block and log nmap OS fingerprinting attempts
#
block return-rst in log quick on $ext_if proto tcp all flags FP/FP
block return-rst in log quick on $ext_if proto tcp all flags SE/SE
