Portal Home > Knowledgebase > Articles Database > security from nmap
security from nmap
Posted by L1nux, 12-30-2009, 03:08 AM |
hi all
i want to know how i can block ip for any user use nmap to scan my server
|
Posted by activelobby4u, 12-30-2009, 04:57 AM |
nmap is a port scanner. The methods are to configure a firewall to open the needed ports and also configure the services for limited connections
|
Posted by DigitalLinx, 12-30-2009, 08:17 AM |
You need an IDS service. Look into http://cipherdyne.org/psad/
|
Posted by jalapeno55, 12-30-2009, 10:36 AM |
Snort would work better, and you can set it up in active response to block the port scan, psad just notifies you of it (I think)
|
Posted by CoreNetworks, 12-30-2009, 12:51 PM |
I would highly recommend you look into portsentry which will likely meet your needs. You simply set it to listen on ports that you know you're not using, and when a probe comes in for those ports (like they would in an nmap of your system) then you could implement a rule like:
in your portsentry.conf file.
Hope this helps.
|
Posted by Dougy, 12-30-2009, 01:11 PM |
IPTABLES_BLOCK_METHOD'.. look into it sometime, security guru!
ENABLE_AUTO_IDS is useful as well.
|
Add to Favourites Print this Article
Also Read
Volumedrive? (Views: 791)
VB Help (Views: 651)