Mourning the loss of our friend, WhitPhil.
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
 
General Security
Tag Cloud
access audio black screen blue screen boot bsod connection crash dell desktop driver drivers dvd email error excel excel 2003 firefox hard drive hardware hdmi hijackthis internet keyboard laptop malware monitor network networking outlook problem recovery router safe mode screen slow sound spyware trojan upgrade vba video virus vista vundo windows windows 7 windows vista windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > General Security >
NMap Null San and NMap Xmas Scan

Tip: Click here to scan for System Errors and Optimize PC performance
[ Sponsored Link ]

Closed Thread
 
Thread Tools
BewitchingFaerie's Avatar
Computer Specs
Junior Member with 2 posts.
 
Join Date: Dec 2007
Experience: Intermediate
30-Apr-2009, 02:09 AM #1
NMap Null San and NMap Xmas Scan
Hello ,

I've read all you have on NMap Null Scan and the xmas one , and it hasn't showed anything here on how to stop it from happening outside of telling people if Norton is blocking it don't worry . That's really disturbing advice , if this thing is still trying to send packets telling someone to ignore it is not a technical solution to a computer trying to hack it's way in. there should be a way to stop it completely from trying to make contact with ones computer . I've been all over the net in different forms and surprisingly , all of them say to handle it the same way . Except for one who suggested windump and winpcap . I'm getting the same things constantly and it is slowing my computer down and freezing it . I am running Norton 2009, I don't want to tell it to not let me know , I want to know what's going on in my computer . the more I know of it the more I want to learn on how to get rid of it so it doesn't keep happening in the future . Please if there is anyone here who knows how to stop this please help . Thank you in advance
lotuseclat79's Avatar
Distinguished Member with 14,984 posts.
 
Join Date: Sep 2003
Location: -71.45091, 42.27841
30-Apr-2009, 08:59 AM #2
Hi BewitchingFaerie,

Welcome to TSG!

What happens when you visit the web site http://nmap-online.com and scan your computer (Quick, Full and Custom scans)?

The nmap-online.com web site is used to test the web site address given by ip address in the command against various vulnerabilites. To test for the Null and Xmas scans, edit the arguments to specify: -sN -sX
for doing both Null and Xmas scans, or do two separate scans, using only one of the arguments at a time.

If Norton 2009 includes a firewall, you should visit the Norton web site to find out if you don't know, but, my bet is that it would probably detect either type of scan if it does in fact have a firewall rule for either. If Norton 2009 does not include a firewall, then it cannot protect you against either Null or Xmas scans.

Norton AntiVirus 2009 does not have a firewall, Norton Internet Security 2009 has a two-way firewall.

-- Tom
__________________
The independence created by philosophical insight is - in my opinion - the mark of distinction
between a mere artisan or specialist and a real seeker after truth. - Einstein 1944
Imagination is more important than knowledge. - Einstein

Last edited by lotuseclat79 : 30-Apr-2009 09:30 AM.
lunarlander's Avatar
Computer Specs
Senior Member with 1,328 posts.
 
Join Date: Sep 2007
30-Apr-2009, 09:12 AM #3
To block scans, install a router that has stateful packet inspection firewall ( SPI ). It costs a little more, but its worth it.
BewitchingFaerie's Avatar
Computer Specs
Junior Member with 2 posts.
 
Join Date: Dec 2007
Experience: Intermediate
01-May-2009, 07:46 PM #4
Post Subject
Thanks for your reply lotuseclat79, I am running Norton Internet Security and it is blocking it and , no I haven't been to the any sites to get it scanned . As I said before I've been all over the net searching and no one has mentioned a scan or anything like a scan it to find.
But thank you ! I'll go to the mentioned site and do the scans and symantecs to see what's there on it . Much appreciated
lunarlander's Avatar
Computer Specs
Senior Member with 1,328 posts.
 
Join Date: Sep 2007
05-May-2009, 01:09 AM #5
You can also try the intrusion detection system called Snort. Don't know if it has signatures for scans, but theorectically, you can have a rule that detects scans and send a Reset back to the originator.
Closed Thread Bookmark and Share

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Smart Search

Find your solution!



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.

Thread Tools


You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -5. The time now is 11:39 PM.
Copyright © 1996 - 2009 TechGuy, Inc. All rights reserved.
Powered by vBulletin, Copyright © 2000 - 2009, Jelsoft Enterprises Ltd.
Powered by Cermak Technologies, Inc.