Subject: Re: network/port scan detector ?
To: Anders Magnusson <ragge@ludd.luth.se>
From: Ignatios Souvatzis <ignatios@cs.uni-bonn.de>
List: tech-net
Date: 05/18/1999 10:58:19
On Mon, May 17, 1999 at 11:51:11PM +0200, Anders Magnusson wrote:
> >
> > Hi,
> > I was thinking of a feature I could want on my router: a tool that could
> > automatically detect scans, and update a blacklist and filters automatically.
> >
> It may be hard to do. ICQ for example _does_ a port-scan that is a part of
> the ICQ protocol, and that is very hard to differ from "evil" port-scans.
But ICQ _is_ evil.
-is