Re: [cobalt-users] Portscan message

["Dave~" <cobaltraq4@xxxxxxx>]

----- Original Message -----
Subject: [cobalt-users] Portscan message


> -A possible port scan of your computer has been detected. Your computer has
> -rejected multiple connection attempts from the same source. The following
> -line describes the IP packet that rejected the latest attempt:
>
> My question is, now that portscanner has done it's job very well, does
> portscanner now place the offender into a file to block them from possible
> future 'attacks' or do I need to add them to something like 'hosts.deny'. I
> check the archives some and Google but I may have missed the answer.

Going by memory (dangerous) but all info needed to answer this question has
been discussed here a few times- so rather than me looking it up...

Assuming this is from the new hardening patch, I believe the block is only
good for 5 minutes.  For continual offenders goto the GUI, Control Panel,
click on parameters next to 'scan detection'.  There are windows to add repeat
offenders, as well as, add IP addys NEVER to block- like your own.  I wouldn't
bother much with the AOhell thing though as all one has todo there is hang up
and dial again- new IP/addy so it's futile.   hosts.deny is something you
should start to learn and understand and has also been discussed in the
archives.

FWIW,

Dave~