Re: 'mirror' with iptables
On Tue, 13 Nov 2001, phadell wrote:
> I would like to do a rule that mirror the packets that incoming from a
> portscanner.
> The rule must return the packets to the source. If anyone scan my machine
> ports, the result will be the list of source address open ports.
this will enable an attacker to bounce arbitrary packets off your
machine to any target by spoofing source address -- probably not what
you would want to happen...
if you want to stop portscans maybe portsentry would help you?
-thomas
--
Do what thou wilt shall be the whole of the Law.
-- Aleister Crowley
gpg: pub 1024D/81FD4B43 sub 4096g/BB6D2B11=>p.nu/d
2B72 53DB 8104 2041 BDB4 F053 4AE5 01DF 81FD 4B43
Reply to: