• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Auto-block ( ban .. ? ) hackers.

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Misc.] >> ISA Server 2004 Wish List >> Auto-block ( ban .. ? ) hackers. Page: [1]
Login
Message << Older Topic   Newer Topic >>
Auto-block ( ban .. ? ) hackers. - 6.Feb.2004 7:42:00 PM   
penrose.l@2college.nl

 

Posts: 474
Joined: 29.Jan.2004
From: Netherlands
Status: offline
In case a hacker is caught by the better IDS system (see related topic) his IP should be automatically added to a banlist.

Kind Regards,
Lex Penrose
Post #: 1
RE: Auto-block ( ban .. ? ) hackers. - 22.Feb.2004 12:31:00 PM   
bagins

 

Posts: 2
Joined: 22.Feb.2004
Status: offline
Maybe...
but if someone writes a script that utilises, let's say, NMAP to scan known ports from hundreds or thousends of false addresses, regular uses may not be able to connect because their addresses would be automaticly banned?

(in reply to penrose.l@2college.nl)
Post #: 2
RE: Auto-block ( ban .. ? ) hackers. - 22.Feb.2004 6:54:00 PM   
penrose.l@2college.nl

 

Posts: 474
Joined: 29.Jan.2004
From: Netherlands
Status: offline
IDS could use fingerprinting , proxy checking , etc... it can be done I think.

(in reply to penrose.l@2college.nl)
Post #: 3
RE: Auto-block ( ban .. ? ) hackers. - 22.Feb.2004 7:42:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Lex,

I seems like a good idea, but I have to agree that automatically blocking is not a good idea, because its so easy for them to spoof source addresses. Its much better to use the app layer filtering to block whatever it is they're trying to do.

Thanks!
Tom

(in reply to penrose.l@2college.nl)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Misc.] >> ISA Server 2004 Wish List >> Auto-block ( ban .. ? ) hackers. Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts