Is there a way to get psad to block the port scanning IP with the APF firewall?

abefroman · 04-13-2008, 09:58 PM

Is there a way to get psad to block the port scanning IP with the APF firewall?

For instance I am getting port scanned from:
Source: 69.157.13.238
DNS: bas2-hamilton14-1167920622.dsl.bell.ca

But psad isn't blocking that IP automatically and they are going to other IPs on that same server and scanning those.

How can I get psad to block that IP?

Wakil · 04-15-2008, 10:57 AM

Quote:

Originally Posted by abefroman

Is there a way to get psad to block the port scanning IP with the APF firewall?

For instance I am getting port scanned from:
Source: 69.157.13.238
DNS: bas2-hamilton14-1167920622.dsl.bell.ca

But psad isn't blocking that IP automatically and they are going to other IPs on that same server and scanning those.

How can I get psad to block that IP?

Hi,

I'M SORRY but i really didn't get wot you ment.