TCP Stealth: How to prevent that a reset is sent on an ACK to a portwithout listener

ZZT · Jun 23, 2004

Hi,

is there a way to "stealth" not used ports by preventing the OS to send
a ack-reset to a syn (without using firewall- or such software)?

best regards

Steven L Umbach · Jun 23, 2004

I don't know if you can do it to the extent that you want. The link below shows some
ways to harden the tcp/ip stack and you can use ipsec filtering to block access to
open ports from unauthorized access. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;315669
http://www.securityfocus.com/infocus/1559 -- how to configure ipsec filtering

Dave · Jun 23, 2004

3rd party firewalls like zonealarm will do this i believe.

TCP Stealth: How to prevent that a reset is sent on an ACK to a portwithout listener

ZZT

Steven L Umbach

Dave