[PLUG] Weird "PortScans"

Stafford A. Rau srau at rauhaus.org
Fri Mar 14 10:36:02 UTC 2003


Are you sure that these are connections originating from your web
server, and not just replies to connection requests from outside
clients? Do they have the "syn" bit set, and only the "syn" bit, or are
they "acks"?

--Stafford




More information about the PLUG mailing list