Re: more newbee questions
- From: "Matt" <matt@xxxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 1 Aug 2001 12:41:00 -0700
you are correct, but it makes it easer to firewall if the port tells you
that it is closed.. I dont want to make it easy..
Matt K
-----Original Message-----
From: Shayne Lebrun [mailto:slebrun@xxxxxxxxxxx]
Sent: Wednesday, August 01, 2001 9:13 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: more newbee questions
http://www.ISAserver.org
You should be able to use packet filters to simply drop the request. But
technically speaking, I believe the TCP/IP standard calls for a 'go away'
response. :-)
-----Original Message-----
From: Matt [mailto:matt@xxxxxxxx]
Sent: Wednesday, August 01, 2001 12:08 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: more newbee questions
http://www.ISAserver.org
if I already answered this I am sorry to repeat.
I am using a simple ISA server connected to a modem and a simple network set
up.
Matt Kopf
-----Original Message-----
From: StuUk31@xxxxxxx [mailto:StuUk31@xxxxxxx]
Sent: Tuesday, July 31, 2001 2:14 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: more newbee questions
http://www.ISAserver.org
meaning of life the universe and everything is 42 LOL
good question, i think by getting a port to be stealthy would be to stop is
replying to any packets. As the 3 way handshake is:
Client 1. SYN sent from client ---> Server
Client 2. SYN/ACK sent from server <--- Server
Client 3. ACK sent from client ---> Server
as most scans report a port open when a connection can be made, so to to
make
ports stealthy they musn't reply to the client computer saying, no sorry
port
isn't open, which is what they do. Do you run any firewalls there?
stu ------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
matt@xxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
slebrun@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
matt@xxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
