LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Security (https://www.linuxquestions.org/questions/linux-security-4/)
-   -   Is there a way to get psad to block the port scanning IP with the APF firewall? (https://www.linuxquestions.org/questions/linux-security-4/is-there-a-way-to-get-psad-to-block-the-port-scanning-ip-with-the-apf-firewall-635144/)

abefroman 04-13-2008 09:58 PM

Is there a way to get psad to block the port scanning IP with the APF firewall?
 
Is there a way to get psad to block the port scanning IP with the APF firewall?

For instance I am getting port scanned from:
Source: 69.157.13.238
DNS: bas2-hamilton14-1167920622.dsl.bell.ca

But psad isn't blocking that IP automatically and they are going to other IPs on that same server and scanning those.

How can I get psad to block that IP?

Wakil 04-15-2008 10:57 AM

Quote:

Originally Posted by abefroman (Post 3120400)
Is there a way to get psad to block the port scanning IP with the APF firewall?

For instance I am getting port scanned from:
Source: 69.157.13.238
DNS: bas2-hamilton14-1167920622.dsl.bell.ca

But psad isn't blocking that IP automatically and they are going to other IPs on that same server and scanning those.

How can I get psad to block that IP?

Hi,

I'M SORRY but i really didn't get wot you ment.


All times are GMT -5. The time now is 02:33 AM.