From owner-freebsd-questions@FreeBSD.ORG  Wed Sep  7 15:30:38 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: questions@freebsd.org
Delivered-To: freebsd-questions@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 00C9C16A41F
	for <questions@freebsd.org>; Wed,  7 Sep 2005 15:30:38 +0000 (GMT)
	(envelope-from josh@metropark.com)
Received: from web.metropark.com (209.248.134.200.nw.nuvox.net
	[209.248.134.200])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 55A3743D4C
	for <questions@freebsd.org>; Wed,  7 Sep 2005 15:30:37 +0000 (GMT)
	(envelope-from josh@metropark.com)
Received: (from root@localhost)
	by web.metropark.com (8.12.10/8.12.3) id j87FUwfn094681
	for questions@freebsd.org; Wed, 7 Sep 2005 10:30:58 -0500 (CDT)
	(envelope-from josh@metropark.com)
Received: from jweaver (users.metropark.com [209.248.134.245])
	by web.metropark.com (8.13.4/8.12.3av) with ESMTP id j87FUsBb094618
	for <questions@freebsd.org>; Wed, 7 Sep 2005 10:30:54 -0500 (CDT)
	(envelope-from josh@metropark.com)
Message-Id: <200509071530.j87FUsBb094618@web.metropark.com>
From: "Joshua Weaver" <josh@metropark.com>
To: <questions@freebsd.org>
Date: Wed, 7 Sep 2005 10:31:39 -0500
MIME-Version: 1.0
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
In-Reply-To: <3060c23905090708254357d697@mail.gmail.com>
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
Thread-Index: AcWzwHxGhRwVLxo+SS+QIKd5Bf6+YAAAJ6rw
X-Virus-Scanned: by AMaViS perl-11
Cc: 
Subject: RE: port scanning and hidden servers
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Sep 2005 15:30:38 -0000

google up arp-sk, use it to modify the arp tables in switch and play with
him a bit :)

-Joshua

> -----Original Message-----
> From: owner-freebsd-questions@freebsd.org [mailto:owner-freebsd-
> questions@freebsd.org] On Behalf Of Mike Hernandez
> Sent: Wednesday, September 07, 2005 10:26 AM
> To: questions@freebsd.org
> Subject: Re: port scanning and hidden servers
> 
> If you ask him not to do so, then you know who he is, correct? The
> best way to prevent him from continuing is to deny him access to the
> network.  AFAIK there is no way to block a scan, though you could
> close ports and otherwise secure your systems so that the scans won't
> produce any helpful information?  Hiding a server wont help much, nmap
> can scan blocks of IP's.  If the servers aren't on the same network as
> your users they can't be scanned easily, but that might complicate
> your setup.
> 
> IMHO, revoke the user's permission to access the network, or bring up
> the issue with someone who has the authority to do so.
> 
> Mike
> _______________________________________________
> freebsd-questions@freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-questions
> To unsubscribe, send any mail to
"freebsd-questions-unsubscribe@freebsd.org"