On Mon, Mar 16, 2009 at 12:26 PM, Chris Louden <ch...@chrislouden.com> wrote: > On Mon, Mar 16, 2009 at 12:10 PM, Brad Beyenhof <bbeyen...@gmail.com> wrote: >> On Mon, Mar 16, 2009 at 12:02 PM, Michael Lynch <mlynch1...@msn.com> wrote: >>> >>> Heres what is in question! >>> >>> Port Protocol State service >>> >>> 12345 tcp filtered netbus >>> 27374 tcp filtered subseven >>> 31337 tcp filtered Elite >> >> Since all three ports are reported as being 'filtered,' that means >> that they're all blocked by a firewall on the machine you're scanning. >> The service names just come from a local flat-file database; unless >> you put "-sV" in your nmap command line it doesn't actually probe >> ports for the services they're running. > > Can't filtered also mean that the port is not necessarily blocked, but > that there is no software listening on that port?
Yes and no. There are three states: open, closed, and filtered. Open means there's a daemon listening, closed means there's not one listening but it's not firewalled, and filtered means it's firewalled. Just because a port is firewalled doesn't necessarily mean there's a service listening behind the firewall, but it is still definitely blocking traffic. -- Brad Beyenhof . . . . . . . . . . . . . . . . . http://augmentedfourth.com Life would be so much easier if only (3/2)^12=(2/1)^7. -- KPLUG-Newbie@kernel-panic.org http://www.kernel-panic.org/cgi-bin/mailman/listinfo/kplug-newbie
