From owner-freebsd-questions@FreeBSD.ORG Thu Nov 30 20:01:54 2006 Return-Path: X-Original-To: questions@freebsd.org Delivered-To: freebsd-questions@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id E6FFD16A620 for ; Thu, 30 Nov 2006 20:01:54 +0000 (UTC) (envelope-from cperciva@freebsd.org) Received: from pd5mo2so.prod.shaw.ca (shawidc-mo1.cg.shawcable.net [24.71.223.10]) by mx1.FreeBSD.org (Postfix) with ESMTP id 79768440A5 for ; Thu, 30 Nov 2006 19:56:48 +0000 (GMT) (envelope-from cperciva@freebsd.org) Received: from pd3mr1so.prod.shaw.ca (pd3mr1so-qfe3.prod.shaw.ca [10.0.141.177]) by l-daemon (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004)) with ESMTP id <0J9K00I5S7AV4Z00@l-daemon> for questions@freebsd.org; Thu, 30 Nov 2006 12:54:31 -0700 (MST) Received: from pn2ml1so.prod.shaw.ca ([10.0.121.145]) by pd3mr1so.prod.shaw.ca (Sun Java System Messaging Server 6.2-7.05 (built Sep 5 2006)) with ESMTP id <0J9K00LQH7AUH520@pd3mr1so.prod.shaw.ca> for questions@freebsd.org; Thu, 30 Nov 2006 12:54:31 -0700 (MST) Received: from hexahedron.daemonology.net ([24.82.18.31]) by l-daemon (Sun ONE Messaging Server 6.0 HotFix 1.01 (built Mar 15 2004)) with SMTP id <0J9K0034A7ATLRA0@l-daemon> for questions@freebsd.org; Thu, 30 Nov 2006 12:54:30 -0700 (MST) Received: (qmail 3768 invoked from network); Thu, 30 Nov 2006 19:54:21 +0000 Received: from unknown (HELO ?127.0.0.1?) (127.0.0.1) by localhost with SMTP; Thu, 30 Nov 2006 19:54:21 +0000 Date: Thu, 30 Nov 2006 11:54:21 -0800 From: Colin Percival In-reply-to: To: Chuck Swiger Message-id: <456F36ED.6020301@freebsd.org> MIME-version: 1.0 Content-type: text/plain; charset=ISO-8859-1 Content-transfer-encoding: 7bit X-Enigmail-Version: 0.94.0.0 References: <365084.23607.qm@web37213.mail.mud.yahoo.com> User-Agent: Thunderbird 1.5 (X11/20060416) Cc: questions@freebsd.org, Wasp King Subject: Re: stop a freebsd server from responding to pinging? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 30 Nov 2006 20:01:55 -0000 Chuck Swiger wrote: > On Nov 30, 2006, at 10:55 AM, Wasp King wrote: >> 1. How do I stop others from port scanning a server? > > Marcus Ranum suggests using wirecutters on the ethernet cable. > If the server is internet-reachable, then it can be port-scanned. Considering that many systems these days have 802.11 hardware, I'd also suggest applying wirecutters to the power cable. Colin Percival