Great Circle Associates Firewalls
(January 1995)
 

Indexed By Date: [Previous] [Next] Indexed By Thread: [Previous] [Next]

Subject: Re: detecting port scanning
From: Michael Holmes <holmesm @ yyz . org>
Date: Mon, 16 Jan 1995 04:27:06 -0500
To: firewalls @ greatcircle . com

[Momentary de-lurk]

I've been thinking about, and am interested in such an "anti-" program 
since this subject of scanning ports came up.

With such excellent suggestions that were given regarding printing a 
comment when a specific port was plinked, recently, I would be interested 
in hearing if there are any similar "easy hacks" which would have a 
watchdog program monitor all ports, and log/exec on all plinks, other 
than those in inetd.conf

Ideally, it wouldn't depend on any specific firewall product/wrappers/etc.

Any good ideas?

holmesm @
 yyz .
 org

[ Back to lurking ]


Follow-Ups:
Indexed By Date Previous: Re: where can I find RFCs ?
From: Pradit Pitaksathienkul <pradit @ kmitnb03 . kmitnb . ac . th>
Next: Re: where can I find RFCs ?
From: long-morrow @ CS . YALE . EDU (H Morrow Long)
Indexed By Thread Previous: Re: detecting port scanning
From: Darren Reed <avalon @ coombs . anu . edu . au>
Next: Re: detecting port scanning
From: blymn @ awadi . com . AU (Brett Lymn)

Google
 
Search Internet Search www.greatcircle.com