[Snort-inline-users] What if someone scans my snort_inline host?

[ChuZhenlin <ch...@16...>]

1.My host have snort_inline running with appropriate rules and some ftp, mysql services. If someone scans my host, can I set appropriate rules to prvent my host without reveal my services information? That is , not let the scanner know what services are on my host.

2.What result will a scanner report if a host drop all the packet from the scanner?

Sorry for the question because I dont have a test device in hand and I need the answer right now.

Thanks