Portal Home > Knowledgebase > Articles Database > security from nmap


security from nmap




Posted by L1nux, 12-30-2009, 03:08 AM
hi all i want to know how i can block ip for any user use nmap to scan my server

Posted by activelobby4u, 12-30-2009, 04:57 AM
nmap is a port scanner. The methods are to configure a firewall to open the needed ports and also configure the services for limited connections

Posted by DigitalLinx, 12-30-2009, 08:17 AM
You need an IDS service. Look into http://cipherdyne.org/psad/

Posted by jalapeno55, 12-30-2009, 10:36 AM
Snort would work better, and you can set it up in active response to block the port scan, psad just notifies you of it (I think)

Posted by CoreNetworks, 12-30-2009, 12:51 PM
I would highly recommend you look into portsentry which will likely meet your needs. You simply set it to listen on ports that you know you're not using, and when a probe comes in for those ports (like they would in an nmap of your system) then you could implement a rule like: in your portsentry.conf file. Hope this helps.

Posted by Dougy, 12-30-2009, 01:11 PM
IPTABLES_BLOCK_METHOD'.. look into it sometime, security guru! ENABLE_AUTO_IDS is useful as well.



Was this answer helpful?

Add to Favourites Add to Favourites    Print this Article Print this Article

Also Read
Volumedrive? (Views: 791)
VB Help (Views: 651)


Language: