Some time ago Peter da Silva said:
> So write a new daemon to do the job. Just have it open all the ports
> and feed him poisoned bait. Now that I think of it, klaxon's the wrong
> way to go, too. You want a program that completes the open and waits
> for the bad guy to go away. Echo would work.
On the network I admin we run a select few services on the machines
we have exposed to the 'Net. I run other stuff on the ports that are
likely to be scanned as well as blocking access to some services at
our router. For example, I was running tcpd and tcpsuck on the
finger port of our machines, but it seems that too many people would
think that the finger request died and try again, and again. I wrote
a tiny daemon that simply logs the user they were trying to finger
and return a "service denied" type of message to them. I also do the
same thing with telnet.
--
Eric Wieling
Network Operations Center
Inter Commerce Corporation
Technical Support: 504-525-1868
Administrative: 504-585-7303
References:
|
|
