Homework: iptables prevent nmap scan and binlog

Application of nmap:

Host detection
Port scan
Version detection
System detection
Support detection script writing

kali view the virtual machine using -sS

Virtual machine configuration,

[[email protected] ~]# iptables -F[[email protected] ~]# iptables -t filter -I INPUT -p tcp --tcp-flags ALL FIN,URG,PSH -j REJECT[[email protected] ~]# iptables -t filter -I INPUT -p tcp --tcp-flags SYN,RST SYN,RST -j REJECT[[email protected] ~]# iptables -t filter -I INPUT -p tcp --tcp-flags SYN,FIN SYN,FIN -j REJECT[[email protected] ~]# iptables -t filter -I INPUT -p tcp --tcp-flags ALL SYN -j REJECT[[email protected] ~]# iptables -t filter -R INPUT 1 -s 192.168.171.152 -p tcp --dport 1: --tcp-flags ALL ACK -j REJECT

Results: