How can you proect CDP from reconnaissance attacks?