Munchables
February 25th, 2003, 08:35 PM
I use Sygate which is a great firewall. One thing a blind monkey can detect stelth scans better than sygate. I mean nmapwin can scan at insane and sygate wouldn't know.
SO besides getting a crack force of blind monkeys what do ppl do to detect stelth scans?
DETROIT
February 25th, 2003, 08:56 PM
To check your firewall for possible intrusions and stealth mods and probes. Go to Gibson Research (grc.com) great place to check you firewall for free.
Peace-
DETROIT:shy
Munchables
February 26th, 2003, 08:30 AM
I am supprized that no one cares about stelth scans or sniffing. I mean a 1/2 desent skript kiddie can just download one and any hacker won't fuck around with toolz that any basic firewall can pick up IE conventional port scans. In my opinon the skript kiddie that is port scanning me couldn't get around my security if his life depended on it, but the more advanced skrip kiddie or the hacker using stelth scans or sniffing my packets could.
peace
Rickio
February 26th, 2003, 09:07 AM
I was browsing webattack.com yesterday and saw this
http://www.webattack.com/get/proport.shtml
Proport is a port monitor/protector. The program will monitor an infinite amount of ports for trojans and nukes. Some additional features are auto connection-kill, and IP resolving. Proport comes loaded with a list of 300 commonly used trojan ports, which can be edited and extended by the user. It can be configured to prompt on suspicious connections or to kill them automatically. Features include: unlimited port monitoring, auto connection kill, port list editing, attack log, remote filter, process manager, autostart method spy, autostart file editing, and file scanning.
It might be interesting to use alongside a firewall. Also check out some of the other stuff their.
peace