[isapros] Re: Port Scan
- From: "Steve Moffat" <steve@xxxxxxxxxx>
- To: <isapros@xxxxxxxxxxxxx>
- Date: Tue, 25 Jul 2006 15:59:30 -0300
It automatically adds the ip address to a deny set when ISA reckons it's
being scanned.
S
-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Amy Babinchak
Sent: Tuesday, July 25, 2006 3:21 PM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: Port Scan
I don't know that joke. I think it was before my time on the list.
What's the block attacker script? Never heard of it.
Amy Babinchak
-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Tuesday, July 25, 2006 2:19 PM
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Re: Port Scan
Ask Tony for the BlockAttacker script.
I'm sure he's still trying to support it.
:-p
Tom has it right; you can generally ignore them, since damn few ISPs
even care.
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isapros-bounce@xxxxxxxxxxxxx [mailto:isapros-bounce@xxxxxxxxxxxxx]
On Behalf Of Amy Babinchak
Sent: Tuesday, July 25, 2006 10:21
To: isapros@xxxxxxxxxxxxx
Subject: [isapros] Port Scan
What should I do about a port scan that just won't go away? I've got two
IP addresses port scanning my server around the clock. An email to the
owner bounced back, unknown email address.
Is there anything to be done?
Amy
All mail to and from this domain is GFI-scanned.
Other related posts:
