[strongSwan] Strongswan responds to scan attack

Tobias Brunner tobias at strongswan.org
Wed Dec 5 12:03:13 CET 2018


Hi Naveen,

> Is there a configuration to avoid strongswan from responding
> to unsolicited request from scans, even when strongswan is not
> configured with an endpoint configuration, 

What kind of request is sent, what kind response?  And what exactly
makes a request unsolicited?

Anyway, there is the charon.initiator_only option to ignore any initial
IKE messages.

Regards,
Tobias


More information about the Users mailing list