From owner-freebsd-questions@FreeBSD.ORG  Wed Sep  7 15:31:03 2005
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
X-Original-To: freebsd-questions@freebsd.org
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id ABBFA16A420
	for <freebsd-questions@freebsd.org>;
	Wed,  7 Sep 2005 15:31:03 +0000 (GMT)
	(envelope-from denny@jodeit.com)
Received: from mail.jodeit.com (mail.jodeit.com [207.10.131.48])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 65EC343D58
	for <freebsd-questions@freebsd.org>;
	Wed,  7 Sep 2005 15:31:01 +0000 (GMT)
	(envelope-from denny@jodeit.com)
Received: from dennylaptop2 [207.10.131.89] by mail.jodeit.com with ESMTP
	(SMTPD-8.21) id A736038C; Wed, 07 Sep 2005 11:28:54 -0400
From: "Denny Jodeit" <denny@jodeit.com>
To: "'Boris Karloff'" <modelt20@canada.com>,
	<freebsd-questions@freebsd.org>
Date: Wed, 7 Sep 2005 11:30:38 -0400
Message-ID: <001e01c5b3c1$199321a0$59830acf@dennylaptop2>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="windows-1250"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook, Build 10.0.2627
In-Reply-To: <431f04f6.22c.572a.3251@canada.com>
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
X-Declude-Sender: denny@jodeit.com [207.10.131.89]
X-Spam-Tests-Failed: CMDSPACE [3]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
Cc: 
Subject: RE: port scanning and hidden servers
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Sep 2005 15:31:03 -0000



>
> Hello:
> 
> I have a user on my network with a Linux box that is
> performing a port scan on all the computers in my network
> manually. He's doing this 'because he can'. Although I've
> asked him not to, he continues to do so.
> 
> 1) How can I block or inhibit port scans launched against my
> freeBSD servers from within my network?
> 
> 2) How can I 'hide' my freeBSD servers from users on the
> network? (If they can't see them, then they don't know to
> scan them.)
> 
> Thanks in advance.
> 
> Harold


Try portsentry in conjunction with logcheck, both are in the ports.

D.

-- 
No virus found in this outgoing message.
Checked by AVG Anti-Virus.
Version: 7.0.344 / Virus Database: 267.10.18/91 - Release Date: 9/6/2005