Hi,
I've installed ASL 6.0 and the portscan seems to work okay (i've tried an external portscan... and ports are being closed upon scanning)
But I still don't get any email notification if the portscan is detected (tested the first 1056 ports)...
another couple of questions:
- When a portscan is detected...how long will be the originating IP frozen?
- What is the portscan Logic? 5 - 6 ports scanned, then lock the IP?
- How is the portscan detected? with incoming connections on different ports? or Wrong protocol on certain ports? Or Aborted connections (no transfer)?
Thx!
Neko
This thread was automatically locked due to age.