[Snort-users] Re: ask about hack program to go through the firewall

Error79 at ...348... Error79 at ...348...
Fri Sep 20 08:36:06 EDT 2002


Hy 

You will have a little problem scanning your own Network from the inside
in case you did set up your "home network" in snort.conf right.

Ask somebody else from outside your network to scan your Server.
For example with nmap.
Most firewalls pass packets with FIN Flags.

If you use nmap, try one of these options

"nmap -sS -O -vv your_IP"  (includes XMAS Scan)
"nmap -sF -vv your_IP"  (FIN Scan)

(If you are using a Windows PC try "nmapnt")

After that you should see some entry's in your alert log!!!





More information about the Snort-users mailing list