[FUGSPBR] Bloqueando SYN/ACK/SCAN com o ipfw

[Ronan Lucio]

> Alguem tem regras para bloquear syn,ack, scans... utlizando o ipfw?

No kernel:

----------------
# TCP_DROP_SYNFIN adds support for ignoring TCP packets with SYN+FIN. This
# prevents nmap et al. from identifying the TCP/IP stack, but breaks support
# for RFC1644 extensions and is not recommended for web servers.
#
options         TCP_DROP_SYNFIN         #drop TCP packets with SYN+FIN
----------------

[]s
Ronan


_______________________________________________________________
Para enviar um novo email para a lista: fugspbr em fugspbr.org
Sair da Lista: http://lists.fugspbr.org/listinfo.cgi
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/