Oliver Schad wrote:
>
> Not really. And why should a network scan be dangerous? Security by
> obscurity doesn't work. You can scan a well configured host all day
> long, who cares?
>
> mfg
> Oli

True, but if you do happen to have an exploitable service (i.e. the brk
issue with the linux kernel and rsync recently), a script kiddie might grow
tired of waiting for scan results from your network and go elsewhere.
Certainly slowing down potential hackers buys time and frustration for the
attacker if nothing else.  The assumption that all potential attackers are
experts is not a good one.

Tom Veldhouse


--
gentoo-security@g.o mailing list