[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-users] Is a firewall necessary with a RaQ?
- Subject: RE: [cobalt-users] Is a firewall necessary with a RaQ?
- From: "Todd Kirk" <tkirk@xxxxxxxxxxxxxx>
- Date: Thu Nov 15 22:23:45 2001
- List-id: Mailing list for users to share thoughts on Cobalt products. <cobalt-users.list.cobalt.com>
> > Our 'out-of-the-box' RAQ4R temporarily blocks an IP address
> when they
> > 'poke' around..like when you get port scanned the IP gets
> suspended for
> > about 60 seconds.
Our RAQ4R (or maybe its Ipchains doing it) temporarily blocks an IP
address that hits multiple ports within a few seconds. So in cases of
port scanning the IP gets blocked requests after the first few scans.
We wanted to see what ports we had open, so we port scanned our own box
and the result was about 60 seconds of not being able to see our server
from the offending IP address.
I have to admit I do not know whether this is a feature of the RAQ4R by
default or something that is built into IPChains. Anyone know?
regards,
Todd Kirk