[ILUG] Detecting a port scan attempt on my machine.

[Larry Lart]

>> you can drop and log packets without ever giving any indication that
>> they were received.

>which is usually in violation of RFCs for TCP.

...

 you can use a secondary isolated machine(a cheap 486 like) like a Trojan
Horse . and . redirect all packets from that unknown destination to that not
usual ports to this machine. So you can leave them even to hack that
machine(but be careful to isolate that perfect) . You can even go far and
change that system to report himself like 'the big server' responsible for
lota of networks  ... whatever just build you Trojan horse(i am not sure if
there is any company actually building this?... like firewalls?)
 anyway that will slow them down and is giving you the opportunity to see
that some from somewhere is trying something so you have that 'time to
react' ...

Larry Lart
Digital Entity