John Conover wrote: > > Does portsentry(1) make any sense in systems with ipv6 connectivity? > Yes and no. If you want to know that machines are scanning ports, yes. If you want to effectively block IPs, no. You can, of course, block well known IPv6 addresses -- I block Google's DNS resolvers on my house network -- but it's not even a trivial barrier for attackers. -dsr-