Re: [suse-security] how do I build iptable-protection for scanners like nmap

Good Mornning to Athens,

To Drop Stealth Scan like nmap you can use the following rules in a simple firewall with iptables:

iptables -A INPUT -p tcp ! --syn -m state --state NEW -j LOG --log-prefix "Stealth scan" iptables -A INPUT -p tcp ! --syn -m state --state NEW -j DROP

that is the respons in the kiss-style. Kiss = keep it short and stupid. And that was what I want. Regards, Ruprecht