Re: Scanning hosts connecting to a linuxbox.

[Taral <taral () cyberjunkie com>]

On Fri, 12 Feb 1999, Mike A. Harris wrote:
> I would like to somehow have nmap run a scan of my choosing on
> any hosts attempting a connect to any of my ports, either via
> tcpwrappers, or the firewall.
>
> Can someone either explain how to do this, or point me to the
> proper documentation/manuals, etc..  I've got an idea allready
> how to do it with tcpwrappers, but I draw a blank on doing it
> with the firewalled ports.

Either use the logfiles and firewall logging (many many problems), or use the
2.2.x /dev/firewall device to have a userspace daemon receive rejected packets
(MUCH better, but more coding).

Take your pick.

Taral