<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>My Side Notes &#187; Intrusion Detection Tools</title>
	<atom:link href="http://www.mysidenotes.com/category/computer-security/intrusion-detection-tools/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.mysidenotes.com</link>
	<description>my notes on technical support issues and not only...</description>
	<lastBuildDate>Sat, 15 May 2010 14:33:09 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Ban IP address based on port scan detection</title>
		<link>http://www.mysidenotes.com/2009/07/22/ban-ip-address-based-on-port-scan-detection/</link>
		<comments>http://www.mysidenotes.com/2009/07/22/ban-ip-address-based-on-port-scan-detection/#comments</comments>
		<pubDate>Wed, 22 Jul 2009 14:34:42 +0000</pubDate>
		<dc:creator>as</dc:creator>
				<category><![CDATA[Computer Security]]></category>
		<category><![CDATA[Intrusion Detection]]></category>
		<category><![CDATA[Intrusion Detection Tools]]></category>

		<guid isPermaLink="false">http://www.mysidenotes.com/?p=22</guid>
		<description><![CDATA[Regarding to Solar Designer (1999) it is not a good idea to block access to a IP address based on port scan. Port scan can be easily spoofed by generating 1000 of requests to a target with 999 spoofed source addresses and only one real one. This type of attach makes impossible to detect the [...]]]></description>
		<wfw:commentRss>http://www.mysidenotes.com/2009/07/22/ban-ip-address-based-on-port-scan-detection/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
