port scanning

jlf@magusnet.gilbert.az.us jlf@magusnet.gilbert.az.us
Sat, 18 Mar 2000 14:16:50 -0700


Ok, since I am still running an all Debian shop here 
I decided to do some homework.

Depending on how you did your installation, Debian does some
basic tools installs like iplogger, tcp/udp/icmp monitoring, and
some basic firewalling for standard RFC listed IP ranges.
ie. incoming on 10.0.0.0/8

Take a trip over to /etc/init.d and look thru there for
anything that either references a TCP/IP type command or
has some rules in it for ip[masqadm/fwadm/chains] and
try unsetting them.

Or post a "ps axwww" from the machine and we can go from there.

It seems like on Sat, Mar 18, 2000 at 10:35:44AM -0700, der.hans scribbled:
Orig Msg> On Fri, 17 Mar 2000, Wes Bateman wrote:
Orig Msg> 
Orig Msg> > You don't have Abacus Project stuff like Port Sentry running, right?  Is
Orig Msg> 
Orig Msg> Not that I find.
Orig Msg> 
Orig Msg> > it possible you installed that some time back and don't recall?  That's
Orig Msg> > the only thing I can think of that would dynamically "cut you off."
Orig Msg> 
Orig Msg> I just installed the debian developer station :). Who knows what's in it.
Orig Msg> 
Orig Msg> The one thing I haven't checked is to see if I built this into the
Orig Msg> kernel. There used to be a 2.0.x patch that would do this type of thing. I
Orig Msg> don't know if that's been added to 2.2.x and I don't remember seeing it as
Orig Msg> an option. I'll go look at the kernel options a little more closely.
Orig Msg> 
Orig Msg> At least we know whatever it is works pretty good :).
Orig Msg> 
Orig Msg> ciao,
Orig Msg> 
Orig Msg> der.hans 
Orig Msg> -- 

Jean Francois Sends...
President & CEO MagusNet, Inc.
MagusNet.com, MagusNet.Gilbert.AZ.US
CTO EBIZ Enterprises, Inc.
TheLinuxStore.com, TheLinuxLab.com, LinuxWired.net
480-778-1120 - Office
602-770-JLF1 - Cellular