RE: [Sheflug] Security : Port scanning

["Chris Johnson" <chris [at] xxxxxxxxxxxxx>]

-----Original Message-----
From: shef-lug-admin [at] list.sheflug.org.uk
[mailto:shef-lug-admin [at] list.sheflug.org.uk]On Behalf Of Bill Best
Sent: 07 May 2003 15:36
To: shef-lug [at] list.sheflug.org.uk
Subject: Re: [Sheflug] Security : Port scanning


>
>
>My new firewall went 'live' last night about 5pm and today when I checked
>the logs I've got about a dozen cases of port scanning from various
sources.
><question>
>Is all port scanning malicious?
>
Not always.

>What should be done if its found?
>
Nothing - but see below.

>Should I mail a report to the
>administrator detailed on the "whois" lookup page?
>
Life's too short.

>If these organisations
>are not the sort that would host or condone port scanning then it could be
>that either their IP has been spoofed or they have been compromised and
>someone else is running it from their systems.  Either way they probably
>want to know.
>
Maybe.

>Has anyone got a script to automatically do this mailing out?
>
http://www.mynetwatchman.com/


___________________________________________________________________

Sheffield Linux User's Group -
http://www.sheflug.co.uk/mailfaq.html

  GNU the choice of a complete generation.
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.476 / Virus Database: 273 - Release Date: 24/04/2003


I agree, life is too short.  The link looks good, definitely a minimum
required effort solution.  I'll see how things go.  Thanks to all those that
have replied so soon, if you have an alternative solution keep them rolling
in.

Chris

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.476 / Virus Database: 273 - Release Date: 24/04/2003


___________________________________________________________________

Sheffield Linux User's Group -
http://www.sheflug.co.uk/mailfaq.html

  GNU the choice of a complete generation.