Ethereal-users: [Ethereal-users] Filtering port scans

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: "Deogratias Nondi" <dgratius@xxxxxxxxxxx>
Date: Mon, 15 May 2006 13:10:58 +0000

Hi there,

 

I am in a process of developing a firewall for the purpose of blocking/filtering port scans on my host machines.

 

I am looking on how to properly write rules to block SYN, FIN, XMAS and NULL scans. What I have found so far is to allow just SYN packets and block everything else. I don't really like this idea and would like to write specific filter rules for each of the scans I mentioned.

 

Any help would be much appreciated.


Express yourself instantly with MSN Messenger! MSN Messenger