Educause Security Discussion mailing list archives

Re: Scanning Notices


From: Valdis Kletnieks <Valdis.Kletnieks () VT EDU>
Date: Wed, 31 Aug 2011 13:24:30 -0400

On Wed, 31 Aug 2011 13:10:46 EDT, Mike Porter said:

We tell users that wish to engage in scanning to register the IP
doing the scanning with an appropriate PTR record.
"scanner.<dept>.<school>.edu".  Departments should only scan their
own machines, and at rate that does not cause problems.

It's legal for the box to also have a PTR record for actual-hostname.<dept>.<school>.edu
as well - have you encountered any software that barfs when it encounters
multiple PTR records for the same IP?

Attachment: _bin
Description:


Current thread: