Re: [IMail Forum] Port Scanning Question

[Adam Greene]

Another good option is to install a stateful firewall at your gateway and create a policy which denies inbound traffic which does not respond to a connection initiated from within your network. Of course, you may need to punch holes in the policy for specific ports to which remote users should be allowed to initate a connection. ----- Original Message ----- From: Jason Loven To: [EMAIL PROTECTED] Sent: Friday, February 13, 2004 3:03 PM Subject: RE: [IMail Forum] Port Scanning Question Usually using and IDS such as Snort (www.snort.org). It recognizes stuff like that and can inform you if you care to worry about it. From: Patrick Fowler [mailto:[EMAIL PROTECTED] Sent: Friday, February 13, 2004 1:50 PM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Port Scanning Question Where do you look to see the port scanning and how can you tell?   Patrick Fowler, A+, CCNA LAN/WAN - Email Administrator Laramie County School District #1 [EMAIL PROTECTED]     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Tripp Sent: Friday, February 13, 2004 10:55 AM To: [EMAIL PROTECTED] Subject: [IMail Forum] Port Scanning Question   In my Web messaging logs, I have tons of IPs scanning & auditing our mail.mydomain.com. What is the consensus, do I look up their IP and report them to their ISP or do I just take it with a grain of salt?   Andy Tripp Engineering (o) 858-642-2900 x2922 (c) 858-518-5146 http://www.pacificdatavision.com 9645 Scranton Road Suite 205B San Diego, CA 92121   Pacific DataVision, Inc. - Enabling wireless carriers to offer premium push-to-talk applications. NOTICE: This e-mail message is for the sole use of the intended recipient(s) and may contain confidential and privileged information.  Any unauthorized review, use, disclosure or distribution is prohibited.  If you are not the intended recipient, please contact the sender by reply e-mail and destroy all copies of the original message.