[isalist] Re: All port scan attack
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Thu, 27 Apr 2006 14:27:55 -0700
http://www.ISAserver.org
-------------------------------------------------------
You'll have to determine that for yourself.
Some folks get heavy scans on a regular basis, others hardly see any at all.
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Neil Cassidy
Sent: Thursday, April 27, 2006 14:03
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] All port scan attack
I probably set these settings to low, as I see daily numerous port scans from
various IP, but often from an IP range that is my ISP. Does anyone else use
this and what are the settings you use. I believe I set it to 10 ports before
classifying it as an "attack". Is this too low?
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
