Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 12 Feb 2004 11:04:23 -0500
From:      Brian Clapper <bmc@clapper.org>
To:        Dragoncrest <dragoncrest@voyager.net>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Problem with someone port scanning me
Message-ID:  <200402121604.i1CG4Nij032998@z.inside.clapper.org>
In-Reply-To: <5.2.0.9.2.20040212110826.00a9b620@pop.voyager.net>
References:  <5.2.0.9.2.20040212110826.00a9b620@pop.voyager.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On 12 February, 2004, at 11:12 (-0500)
Dragoncrest <dragoncrest@voyager.net> wrote:

> For the past couple of days I've had someone on our lan port scanning my
> box.  Not sure what's up with that, but I'm curious if there's a way to log
> what IP address this is coming from.  I don't have IPFW enabled yet as I
> haven't had the time to configure it at this point as it's currently behind
> the company firewall on our T3.  Is there a way to log where it's coming
> from?  Or is that already being logged somewhere?

The "snort" port (/usr/ports/security/port) can help.

-Brian Clapper, bmc @ clapper.org, http://www.clapper.org/bmc/



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200402121604.i1CG4Nij032998>