Mirror of forum.nim-lang.org

6750 :: Blocking nmap scans

[2020-08-30T22:25:26+02:00]

blmvxer (orginal) [2020-08-30T22:25:26+02:00] view original

Currently I'm working on a relay server and I'm wondering if software methods within Nim would help mitigate scans. So far I can detect them and I'll restart the server after a timing defense. But then upon a second scan it crashes there server

enthus1ast (orginal) [2020-08-31T07:46:22+02:00] view original

Can you be more specific? What os? What do you want to relay? TCP or UDP? Is your server program crashing? why do you restart the server?

I can give you a vague answer for a vague question: when you want to proxy tcp connections, then you could have a udp socket, which never sends data but listens for some kind of magic paket or port knocking combination, then enable the sender ip address in your firewall.

blmvxer (orginal) [2020-10-02T00:23:53+02:00] view original

https://github.com/blmvxer/telnet-honey

enthus1ast (orginal) [2020-10-02T08:02:16+02:00] view original

You must do error checking, every socket read, write and accept is a potential crash.

enthus1ast (orginal) [2020-10-02T09:43:55+02:00] view original

Btw I've also hacked a telnet honeypot (also got post by German Telekom for having an unsecured device in my network because of this ;) ) if you like I can release it for you. (Its very hacky just 4 fun project)

blmvxer (orginal) [2020-10-04T02:05:01+02:00] view original

I'm always game lols

blmvxer (orginal) [2020-10-04T02:05:58+02:00] view original

Also this is an Open Invitation for anyone who would like to make this honeypot more functional and realistic you're free to join the team. :)