Revealing Useful Information in Response to Port Scans

• Drop packets silently.

• Deny rather than reject blocked packets: i.e. Don't return a TCP RST message or an ICMP error code 3.

• IDENTD or AUTH is an exception if the service isn't offered. - Do return TCP RST or an ICMP error if the service isn't offered.

Notes: