Re: Port scan detection with pf

Fundamentally, you do not want to do that.

Please tell me what host it is that you are protecting, and I'll show you why, by spoofing a very small stream of packets from your favorite hosts.

> I found that iptables has (via patch-o-matic) a option to build a Portscan detection Module (psd) which blocks scanning hosts (nmap etc.) for some time and efficiently makes auto-scanning sort of impossible.
Received on Sat Nov 30 13:19:03 2002