How Linux system masks the hacker's Nmap scan

Many network services use Linux systems and have Apache Server software installed. Vulnerable to hackers using Nmap to scan Web sites, now share a precautionary experience.

I can pass the setup, let Linux on Nmap scan ignore color. The iptables tool is used to filter the network information so that the system cannot respond to the scan request information. To improve the security of the server.

You need to run the following command:

#iptables-F

#iptables-A input-p tcp--tcp-flags all fin,urg,psh-j Drop

#iptables-A input-p tcp--tcp-flags syn,rst syn,rst-j Drop

#iptables-A input-p tcp--tcp-flags syn,fin syn,fin-j Drop

#iptables-A input-p tcp--tcp-flags Syn,syn--dport 80-j Drop

After running the above command, Linux will filter the scan information from Nmap, the hacker will not get the active TCP port and operating system version of information, the server is a bit more secure.

Ding Feng Xiao Hu
qq.2881064155
[Email protected]

How Linux system masks the hacker's Nmap scan