Info: blocking portscans alltogether

This is a discussion on Info: blocking portscans alltogether within the Linux Security forums, part of the System Security and Security Related category; Looks like this simple iptables rule blocks the nmap syn portscans alltogether: iptables -A block -p tcp --tcp-flags SYN ...

		Usenet Forums > System Security and Security Related > Linux Security
Info: blocking portscans alltogether

LinkBack

Thread Tools

Display Modes

#1 (permalink)

11-22-2005

acd

Posts: n/a

Info: blocking portscans alltogether

Looks like this simple iptables rule blocks the nmap syn portscans
alltogether:

iptables -A block -p tcp --tcp-flags SYN SYN --tcp-option \! 2 -j DROP

block being the input/forward chain
--
acd

« Previous Thread | Next Thread »

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Posting Rules
You may not post new threads You may not post replies You may not post attachments You may not edit your posts vB code is On Smilies are Off [IMG] code is Off HTML code is Off Trackbacks are On Pingbacks are On Refbacks are On

All times are GMT +1. The time now is 04:43 PM.