I agree with Dave on this one. Dude Van, I thought it was illegal in the states..? Or am I mistaken? Also, think of this from the ISP's view, do they really want a service port scanning their users? And look at it this way, said target has a proxy server on it, attacker proxies into the proxy and scans the target server with that service, since he is now on the targets IP address, I think you understand what I'm getting at by now. nmap is made to find exploits, that is what this service is going to wind up being abused for (in most cases that i know).
<br><br><div><span class="gmail_quote">On 12/1/06, <b class="gmail_sendername">Dave Moore</b> <<a href="mailto:dave.j.moore@gmail.com">dave.j.moore@gmail.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
On 12/1/06, Mike Huber <<a href="mailto:michael.huber@gmail.com">michael.huber@gmail.com</a>> wrote:<br>> first of all, IANAL, but the TOS seem to cover the basics... However, I am<br>> unsure whether they would hold up under strict legal scrutiny. As far as I
<br>> can tell, they may hold up under US criminal law, but not under civil law,<br>> as tort law has its own wonderful little eccentricities. The best safeguard<br>> they seem to have is that they must log the source IP of all scan
<br>> requests... As far as I know, anyone who takes the time to read the nmap<br>> man page should be able to craft a scan which won't be detected by the<br>> scanned host (can someone be a definitive source on this point?), and anyone
<br>> taking malicious action ought to be taking sufficient precautions to avoid<br>> detection anyway. None-the-less, my 8-ball sees litigation in their future.<br><br>All nmap scans are detectable. All port scans are detectable. Just
<br>depends on how hard you're looking.<br></blockquote></div><br>