From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Linux" Subject: Fighting back Date: Fri, 17 Jan 2003 11:57:57 -0700 Sender: netfilter-admin@lists.netfilter.org Message-ID: <002701c2be5a$5cbb7b80$6301a8c0@VAIO> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_0024_01C2BE1F.ACFA3EA0" Return-path: Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: To: netfilter@lists.netfilter.org This is a multi-part message in MIME format. ------=_NextPart_000_0024_01C2BE1F.ACFA3EA0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Hello all, I feel that rpc and netbois scans to my network from the outside are an = obvious attempt to see what I have open, and I'm sure all of you would = agree. Because I run NFS only via my internal network, there are no = machines that would connect via my external interface. I am going to = institute a rule that will cause a person scanning on ports 32770:32789 = and 137 to redirect and scan the ports on the src IP address. In = essence, anyone scanning me, will be basically scanning themselves. All I am asking is for some input to this and whether it is a good idea = or not. Thank you, Linux_303 ------=_NextPart_000_0024_01C2BE1F.ACFA3EA0 Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
Hello all,
 
I feel that rpc and netbois scans to my = network=20 from the outside are an obvious attempt to see what I have open, and I'm = sure=20 all of you would agree.  Because I run NFS only via my internal = network,=20 there are no machines that would connect via my external = interface.  I am=20 going to institute a rule that will cause a person scanning on ports = 32770:32789=20 and 137 to redirect and scan the ports on the src IP address.  In = essence,=20 anyone scanning me, will be basically scanning themselves.
 
All I am asking is for some input to = this and=20 whether it is a good idea or not.
 
Thank you,
 
Linux_303
------=_NextPart_000_0024_01C2BE1F.ACFA3EA0--