Re: Blocking Port scans

From: Terry Vernon (tvernon24_at_comcast.net)
Date: 10/25/05

  • Next message: Omar: "RE: mac to ip address tools" 
    To: "BSK" <bishan4u@yahoo.co.uk>, <pen-test@securityfocus.com>
Date: Mon, 24 Oct 2005 17:51:27 -0500

    a person should never have initiated a handshake wwith every socket on the
    machine in a short period of time. only portscans do that. find or build a
    tool to watch for this and problem semi-solved

    Terry Vernon
    CTO/Senior Developer
    Sprite Technologies

    ----- Original Message -----
    From: "BSK" <bishan4u@yahoo.co.uk>
    To: <pen-test@securityfocus.com>
    Sent: Monday, October 24, 2005 6:34 AM
    Subject: Blocking Port scans

    > Hello Everyone,
    >
    > Just wanted some feedback from you people. I'm doing a
    > Firewall Assessment for a CISCO PIX firewall. The
    > firewall allows SYN, FIN, NULL and XMAS scans but
    > blocks ACK scans (largely means its a stateful
    > firewall).
    >
    > Now what do we do to block the scans that are allowed.
    > I think it should be easy to block FIN, NULL and XMAS
    > scans but how do we block or limit or workaround a SYN
    > scan. 1 way that I think is probably blocking or
    > limiting the packets from the source (using IDS/IPS)
    >
    > Looking ahead to some ideas, thoughts, hints.
    >
    > thns bshan
    >
    >
    >
    >
    > ___________________________________________________________
    > To help you stay safe and secure online, we've developed the all new
    > Yahoo! Security Centre. http://uk.security.yahoo.com
    >
    > ------------------------------------------------------------------------------
    > Audit your website security with Acunetix Web Vulnerability Scanner:
    >
    > Hackers are concentrating their efforts on attacking applications on your
    > website. Up to 75% of cyber attacks are launched on shopping carts, forms,
    > login pages, dynamic content etc. Firewalls, SSL and locked-down servers
    > are
    > futile against web application hacking. Check your website for
    > vulnerabilities
    > to SQL injection, Cross site scripting and other web attacks before
    > hackers do!
    > Download Trial at:
    >
    > http://www.securityfocus.com/sponsor/pen-test_050831
    > -------------------------------------------------------------------------------
    >
    >

    ------------------------------------------------------------------------------
    Audit your website security with Acunetix Web Vulnerability Scanner:

    Hackers are concentrating their efforts on attacking applications on your
    website. Up to 75% of cyber attacks are launched on shopping carts, forms,
    login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
    futile against web application hacking. Check your website for vulnerabilities
    to SQL injection, Cross site scripting and other web attacks before hackers do!
    Download Trial at:

    http://www.securityfocus.com/sponsor/pen-test_050831
    -------------------------------------------------------------------------------

  • Next message: Omar: "RE: mac to ip address tools"

    Relevant Pages

    • RE: 3rd party vuln assesment firms
      ... > "We use the same tools hackers bring to bear against your systems. ... >> I'm looking for a firm to conduct annual 3rd party vulnerability ... Up to 75% of cyber attacks are launched on shopping ... >> your website for vulnerabilities to SQL injection, ...
      (Pen-Test)
    • Re: Hacking to Xp box
      ... I think there was a misunderstanding in the firewall point: ... you need to find some vulnerability that could be exploited to run ... > restricts most of the attacks that use anonymous connections. ... > Audit your website security with Acunetix Web Vulnerability Scanner: ...
      (Pen-Test)
    • Re: Hacking to Xp box
      ... I think there was a misunderstanding in the firewall point: ... you need to find some vulnerability that could be exploited to run ... > restricts most of the attacks that use anonymous connections. ... > Audit your website security with Acunetix Web Vulnerability Scanner: ...
      (Pen-Test)
    • Re: Hacking to Xp box
      ... I think there was a misunderstanding in the firewall point: ... you need to find some vulnerability that could be ... > restricts most of the attacks that use anonymous connections. ... > Audit your website security with Acunetix Web Vulnerability ...
      (Pen-Test)
    • RE: Hacking to Xp box
      ... and an admin with knowledge of their environment would be able ... I think there was a misunderstanding in the firewall point: ... > restricts most of the attacks that use anonymous connections. ... > Audit your website security with Acunetix Web Vulnerability Scanner: ...
      (Pen-Test)