SN <[EMAIL PROTECTED]> wrote:
>
> ----- Original Message ----- 
> From: "Jorge Almeida" <[EMAIL PROTECTED]>
>> (The 1597 ports scanned but not shown below are in state: closed)
>> Port       State       Service
>> 6/tcp      filtered    unknown
>> 25/tcp     filtered    smtp
>> 80/tcp     open        http
>> 135/tcp    filtered    loc-srv
>
> Okay the output here means, the firewall is blocking 6, 25,135, since they
> show up here you didn't completely drop all packages, but only block them,
> this is usually safe.

What exactly is the difference?

I ask because I'm also running shorewall, and although I've closed all
but a couple ports, I get the following results when running nmap from
an outside machine:

(The 1527 ports scanned but not shown below are in state: filtered)
Port       State       Service
113/tcp    closed      auth                    
139/tcp    closed      netbios-ssn             
445/tcp    closed      microsoft-ds

Interestingly, I need to run 'nmap -PT<port> <ip>', where <port> is one
of the ports I've opened, to make nmap realize the host isn't down.
Presumably, this is because port 80 is closed -- but why would it, and
all others, be reported as "filtered"?

-Eamon



--
[EMAIL PROTECTED] mailing list

Reply via email to