Subject: Re: network/port scan detector ?
To: Anders Magnusson <ragge@ludd.luth.se>
From: Ignatios Souvatzis <ignatios@cs.uni-bonn.de>
List: tech-net
Date: 05/18/1999 10:58:19
On Mon, May 17, 1999 at 11:51:11PM +0200, Anders Magnusson wrote:
> > 
> > Hi,
> > I was thinking of a feature I could want on my router: a tool that could
> > automatically detect scans, and update a blacklist and filters automatically.
> > 
> It may be hard to do. ICQ for example _does_ a port-scan that is a part of
> the ICQ protocol, and that is very hard to differ from "evil" port-scans.

But ICQ _is_ evil.

	-is