Blocking Port Scanning

Portsentry runs as a process, if it detects a portscan it will block that address. You should also lock
down your firewall, allowing only traffic to a particular host(s) and port(s) that you dictate ot that
need that traffic, nothing more.

harbor235

The firewall is pretty good, I was just wondering if there was a piece of software that would allow me to block port scans.  I have tried portsentry but I cant get it to complile on FreeBSD 5.3.  Any other suggestions?

Thanks

i.g. port scans cannot be blocked, execept they're done by stupid script kiddies ;-)

You cannot block the scan, but in most firewalls you can detect port scans and configure the firewall by how many ports it must see it as a port scan....maybe you also have the ability in your firewall to drop the source.

Again you cannot block an attempt

> ..  you can detect port scans ..
being pedantic: it is very hard to do and sometimes impossible, so lets say "may detect"

you're right may detect.....

Thanks all for your input.

isn't that the same as I say....

and me too ..