Re: Blocking Port scans

From: Ivan . (ivanhec_at_gmail.com)
Date: 10/25/05

  • Next message: kukulkan: "mac to ip address tools" 
    Date: Tue, 25 Oct 2005 09:32:03 +1000
To: BSK <bishan4u@yahoo.co.uk>

    hey

    what about the "emb_limit" used with the "static" command?

    http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801cd841.html#wp1026694
    The embryonic connection limit lets you prevent a type of attack where
    processes are started without being completed. When the embryonic
    limit is surpassed, the TCP intercept feature intercepts TCP
    synchronization (SYN) packets from clients to servers on a higher
    security level.

    cheers
    Ivan

    On 10/24/05, BSK <bishan4u@yahoo.co.uk> wrote:
    > Hello Everyone,
    >
    > Just wanted some feedback from you people. I'm doing a
    > Firewall Assessment for a CISCO PIX firewall. The
    > firewall allows SYN, FIN, NULL and XMAS scans but
    > blocks ACK scans (largely means its a stateful
    > firewall).
    >
    > Now what do we do to block the scans that are allowed.
    > I think it should be easy to block FIN, NULL and XMAS
    > scans but how do we block or limit or workaround a SYN
    > scan. 1 way that I think is probably blocking or
    > limiting the packets from the source (using IDS/IPS)
    >
    > Looking ahead to some ideas, thoughts, hints.
    >
    > thns bshan
    >
    >
    >
    >
    > ___________________________________________________________
    > To help you stay safe and secure online, we've developed the all new Yahoo! Security Centre. http://uk.security.yahoo.com
    >
    > ------------------------------------------------------------------------------
    > Audit your website security with Acunetix Web Vulnerability Scanner:
    >
    > Hackers are concentrating their efforts on attacking applications on your
    > website. Up to 75% of cyber attacks are launched on shopping carts, forms,
    > login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
    > futile against web application hacking. Check your website for vulnerabilities
    > to SQL injection, Cross site scripting and other web attacks before hackers do!
    > Download Trial at:
    >
    > http://www.securityfocus.com/sponsor/pen-test_050831
    > -------------------------------------------------------------------------------
    >
    >

    ------------------------------------------------------------------------------
    Audit your website security with Acunetix Web Vulnerability Scanner:

    Hackers are concentrating their efforts on attacking applications on your
    website. Up to 75% of cyber attacks are launched on shopping carts, forms,
    login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
    futile against web application hacking. Check your website for vulnerabilities
    to SQL injection, Cross site scripting and other web attacks before hackers do!
    Download Trial at:

    http://www.securityfocus.com/sponsor/pen-test_050831
    -------------------------------------------------------------------------------

  • Next message: kukulkan: "mac to ip address tools"

    Relevant Pages

    • Re: Blocking Port scans
      ... > Firewall Assessment for a CISCO PIX firewall. ... > Audit your website security with Acunetix Web Vulnerability Scanner: ... > Hackers are concentrating their efforts on attacking applications on your ... Up to 75% of cyber attacks are launched on shopping carts, forms, ...
      (Pen-Test)
    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • Re: Hacking to Xp box
      ... I think there was a misunderstanding in the firewall point: ... you need to find some vulnerability that could be exploited to run ... > restricts most of the attacks that use anonymous connections. ... > Audit your website security with Acunetix Web Vulnerability Scanner: ...
      (Pen-Test)
    • Re: Hacking to Xp box
      ... I think there was a misunderstanding in the firewall point: ... you need to find some vulnerability that could be exploited to run ... > restricts most of the attacks that use anonymous connections. ... > Audit your website security with Acunetix Web Vulnerability Scanner: ...
      (Pen-Test)
    • RE: Hacking to Xp box
      ... and an admin with knowledge of their environment would be able ... I think there was a misunderstanding in the firewall point: ... > restricts most of the attacks that use anonymous connections. ... > Audit your website security with Acunetix Web Vulnerability Scanner: ...
      (Pen-Test)