Re: weird scans from port 80
From: Don (third_world@dictatorships.com)
Date: 01/19/03
- Next message: Tim Haynes: "Re: weird scans from port 80"
- Previous message: Kasper Dupont: "Re: weird scans from port 80"
- In reply to: Kasper Dupont: "Re: weird scans from port 80"
- Next in thread: Thorsten Moellers: "Re: weird scans from port 80"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: Don <third_world@dictatorships.com> Date: Sun, 19 Jan 2003 21:58:56 GMT
On Sun, 19 Jan 2003 22:53:48 +0100, Kasper Dupont <kasperd@daimi.au.dk> wrote:
>In general it is impossible to tell the difference. But even if it is
>a malicious packet no harm is done by responding with a tcp-reset.
>If you are worried about flooding you could limit the amount of
>rejects. In my configuration I have limited those to at most 15 in a
>minute, which makes it in the worst case apear to be a slow or highly
>loaded link.
You are wise in the way of the stack ;-)
Don
- Next message: Tim Haynes: "Re: weird scans from port 80"
- Previous message: Kasper Dupont: "Re: weird scans from port 80"
- In reply to: Kasper Dupont: "Re: weird scans from port 80"
- Next in thread: Thorsten Moellers: "Re: weird scans from port 80"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|