> -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Friday, April 04, 2008 17:04 > To: Nauwelaerts, Nick (TCM) > Cc: [email protected]; [EMAIL PROTECTED] > Subject: Re: [c-nsp] OT: Check Point v Cisco PIX (ASA 5500 Series) > > I'd tend to think that it's less about portscans and more > about preventing > someone using you to perform a bounced RST flood. Just my 0x2.
That's a good argument, but you can use your regular rate limiters (which are in place for icmp for example) and anomaly detection for that. Or whatever antispoofing you might have in place. // nick _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
