[1677] in linux-security and linux-alert archive
[linux-security] Re: New Program: Abacus Sentry - Port Scan Detector
daemon@ATHENA.MIT.EDU (ther)
Mon Dec 8 05:08:45 1997
Date: Sun, 7 Dec 1997 23:01:27 +0100 (GMT+0100)
From: ther <therapy@guardian.htu.tuwien.ac.at>
To: linux-security@redhat.com
In-Reply-To: <Pine.LNX.3.95.971205084524.5505A-100000@nemesis.psionic.com>
Resent-From: linux-security@redhat.com
Reply-To: linux-security@redhat.com
On Fri, 5 Dec 1997, Craig H. Rowland wrote:
> - Add the target host to the local Linux filter list using
> ipfwadm.
>
> - Drop the route to the target host via the route command.
abacus (as described) would kill all connections to a host which
portscans him. so an attacker would be able to kill any connection to
any host by spoofed UDP packages.
bye,
therapy
--
----------------------------------------------------------------------
Please refere to the information about this list as well as general
information about Linux security at http://www.aoy.com/Linux/Security.
----------------------------------------------------------------------
To unsubscribe: mail -s unsubscribe test-list-request@redhat.com < /dev/null
