Michael Leone on Tue, 6 Mar 2001 21:36:34 -0500


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [PLUG] portmap and other things


On 06 Mar 2001 16:34:26 -0500, MaD dUCK wrote:
> also sprach Michael Leone (on Tue, 06 Mar 2001 04:36:16PM -0500):
> > No; posrtsentry monitors for port scans. If it sees one, it drops the route
> > back to that host. Effectively black-holing all further communications from
> > the scanning host. Bad for @Home people, since @Home has a stated policy of
> > scanning your host every so often, looking for illegal services.
> 
> ooooooh. nice. is this black-holing permanent or only for like 3 hours
> or configurable or what?

The offending IP is put into a portsentry.blocked file. AFAIK, the file
stays there, until you remove it (i.e., it is not cleared when the
program first loads up). You can also add hosts that are always ignored
when scanning (such as the @Home scanners mentioned above).

Nice program.

> 
> martin
> 
> [greetings from the heart of the sun]# echo madduck@ !#:1:s@\@@@.net
> -- 
> echo Prpv a\'rfg cnf har cvcr | tr Pacfghnrvp Cnpstuaeic
> 
> 
> ______________________________________________________________________
> Philadelphia Linux Users Group       -      http://www.phillylinux.org
> Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
> General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug
> 
> 



-- 
 
------------------------------------------------------------------
Michael J. Leone                  Registered Linux user #201348 
<mailto:turgon@mike-leone.com>    ICQ: 50453890
PGP Fingerprint: 0AA8 DC47 CB63 AE3F C739 6BF9 9AB4 1EF6 5AA5 BCDF

You've got your glory, you've paid for it all
You take your pension in loneliness and alcohol
                     Billy Squier, "Everybody wants you"



______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug