[ILUG] Detecting a port scan attempt on my machine.

[Paul J Collins]

>>>>> "DD" == David Dorgan <dorgand at eircom.net> writes:

    DD> This will work great...you will find somebody scanning your
    DD> machine. However when mr.joe hacker starts up his scanner
    DD> which has SOME intelligence ( it launches attacks based on
    DD> what ports are open only) you have every exploit in the planet
    DD> now flying at you.

This is where you find, read and implement the Firewalling HOWTO.

Of course, you still have to ensure that the applications running on
the still-open ports are up to date.

I believe there is a way to get Portsentry to use ipchains to block
IPs that are port-scanning you, which may be helpful.

-- 
"Pity has no place at my table."
      -- Dr Hannibal Lecter