Security Basics mailing list archives

Re: Server blocks access of IP after nmap scan


From: Ken Fox <kenfox () sas upenn edu>
Date: Wed, 18 May 2011 13:12:08 -0400

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Amon - he might be running fail2ban: http://www.fail2ban.org/

- -- Ken

On 05/18/2011 12:37 PM, amon.amarth9 () gmail com wrote:
I am conducting this little security test on a specific web server owned by a colleague of mine, saying it's pretty 
secured. So first I ran nmap but after the nmap scan completes (and it says all ports filtered, which is impossible), 
the web server became unresponsive. I called my friend in order to explain him how accidentally I DoSed his server 
but he says it's all ok. I check again - it's not responding. So I connect through a proxy and whoa - it's alive, so 
i guess after the nmap scan the server somehow protected itself by blocking access to the site for my ip. I would 
like to know what I can do in this case, how I can successfully complete a nmap scan without putting it 'down'. Any 
ideas please?

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, 
how it benefits your company and how your customers can tell if a site is secure. You will find out how to test, 
purchase, install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for 
set-up are highlighted to help you ensure efficient ongoing management of your encryption keys and digital 
certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iQEcBAEBAgAGBQJN0/3oAAoJELegwRF14fbGfiYIAKu/cbBuOpq2RqmW7ImEzF99
AhkMxtXdacu9JDFfIvZ0D6z2G3MEMwstCRMOWo4mLgR3ydzoJXu4+IsZRTMVxARf
eV4InjUOH9z5oRKQkYWpeyfws5yTLPAWDJ79BYVp1X/UoLBvkddNioCrxeFGLZz0
Y8PASqhAw0OABXSHtrfotrRc6o2InzAoYIvEB2/ENY3u8PRwc+wDZb71XIYkwMvW
VOyZ1bzknpGnXy9EKMOqmRhNyuRKaRKsXF9xGwCY5ZB/DX7acD7EsDN37DqUDw52
hHMHuakWn5FjWNw83PH30sVUk6qRxa+mss4Pf6lDVCWU9PO4KLY1jMaT8yR8DYU=
=gW4q
-----END PGP SIGNATURE-----

------------------------------------------------------------------------
Securing Apache Web Server with thawte Digital Certificate
In this guide we examine the importance of Apache-SSL and who needs an SSL certificate.  We look at how SSL works, how 
it benefits your company and how your customers can tell if a site is secure. You will find out how to test, purchase, 
install and use a thawte Digital Certificate on your Apache web server. Throughout, best practices for set-up are 
highlighted to help you ensure efficient ongoing management of your encryption keys and digital certificates.

http://www.dinclinx.com/Redirect.aspx?36;4175;25;1371;0;5;946;e13b6be442f727d1
------------------------------------------------------------------------


Current thread: