Security

Ask something
Discussion Locked

Defenses for portscanning under server 2003

0 helpful
4 replies

by andrew06

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hey guys, are there any ways to defend against port scanning under Win2k3 Server?

Im looking at setting up server 2003 for dhcp/dns/file server at a lan party and apparently there were numerous attempts to take down the server. This time (due to competition from other LAN's) apparently their will be a few linux boxs that will join the network and attempt to DDoS the server to take it down and tarnish our record of a well organised LAN.

Any ideas guys?

Cheers

4 replies

by jdgretz

W2k3 has no inherant ability to defend against port scanning - that's not it's job.

If I was bringing a server to a LAN party and there were other LANs (and servers I presume) who take pleasure in disrupting your play, I would also bring along a heavy duty router/firewall that does handle DDoS and other attacks well and just ignore the other folks.

But then if it was going to be that kind of environment and I was not in a hacking mood, I'd go someplace else.

jdg

by andrew06

Nah I mean is there anything under Windows 2k3 that will alert you or log it if there is a noticed port scan and can tell you hte MAC, IP, and Computer Name?

Are there any 3rd party programs that you know of that can provide this service?

by beads

Windows Server 2003 is not one of them, though. You can use ISA server as a basic firewall but in this scenario I don't think you'd want to bother with all that NATing that way. But it will separate your server from the Linux boxes running Knoppix, et. al.

Nope. What your looking for is something beefier. Think a dedicated router/firewall to do this for you. Ranging from a cheap $40.00 box to a used Cisco 501 for under $400 - cheaper if you Ebay. Ten minutes of configuration and your pretty much back in business and free of DDoS attacks.

- beads

This discussion is closed to new replies.