Hi,
PS: I ask me, if it is legal to do portscans on any sites ?
it's at least legal in germany. but the admins of the scanned site may get angry about you...
I'm sure laws vary in different places, but it's probably not illegal in most places unless someone actually breaks in. However, it's probably against almost any ISP's Acceptable Use Policy for one of their clients to be portscanning other machines and networks. We've had good success having disciplinary action (i.e. account disabling) taken against
I really dislike this policy. If I don't like somebody on IRC I just have to do a SYN scan w/ the ip src address of the guy I didn't like to disable his account. I think port scanning is an annoying thing of the new internet we have to live with...
portscanning offenders by reporting the incidents to their upstream providers. The problem is that it happens so frequently on the sites I administer that it takes too much time to track down and report each case. It seems that it's an unfortunate part of life on the Internet these days; the best thing is to make sure all your systems are fully patched and as hardened as possible so nobody can take it further than probing for weaknesses.
yepp. Bye, Thomas -- Thomas Biege, SuSE GmbH, Schanzaeckerstr. 10, 90443 Nuernberg E@mail: thomas@suse.de Function: Security Support & Auditing "lynx -source http://www.suse.de/~thomas/thomas.pgp | pgp -fka" Key fingerprint = 09 48 F2 FD 81 F7 E7 98 6D C7 36 F1 96 6A 12 47