* Quoting Jones, Steven (sjones08@eds.com): > Ive found port sentry really good for detecting port scans and then routeing > the return packets to no where. That makes you open to DoS-Attacks. Someone could scan you with spoofed source-IP and disconnect your box. A tarpit is a much better aproach than a (dynamic) blocklist. - Rolf