[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [cobalt-security] Portsentry & UDP ports
- Subject: Re: [cobalt-security] Portsentry & UDP ports
- From: "Marc Gear" <marcg@xxxxxxxxxxxxxx>
- Date: Fri, 6 Apr 2001 19:28:50 +0100
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
> Maybe they can't do anything on these ports anyway and like PortSentry
> says, I'm being "really anal" *wink*, but I feel better knowing those
> ports are being watched.
yes i also recommend running it at its highest setting,
but my main recommendation is to turn off its reactive elements, ie
blackholing hosts, dropping packets via ipchains and dropping into
hosts.deny.
It is very good at noticing scans, but i dont recommend it to be used for
reacting to them.
--
/\/\ a R (