a very strange problem !!??

[Martin Jinnestrand]

Hi   I have a very strange problem. I have a machine that runs Linux red hat 7.2 whith kernel 2.4.18 and iptabels 1.2.6a. My fw script is at the bottom of this mail.   If I run a port scan on my fw mostly of the portscaning programs rebort nothing, because everything is closed. BUT if I use Nmap it reports the folowing:   ----------------------------------------------------- Starting nmap V. 2.53 by [EMAIL PROTECTED] ( www.insecure.org/nmap/ ) Interesting ports on h236n1fls33o1112.telia.com (213.67.194.236): (The 1522 ports scanned but not shown below are in state: closed) Port State Service 139/tcp filtered netbios-ssn Nmap run completed -- 1 IP address (1 host up) scanned in 5 seconds --------------------------------------------------------------- I have no samba on my FW but I have a W2K machine behind my FW. This is dame strange !!!!! Is the port open ??? My fw-script: (sadly all coments are in Swedish but will understand the script anyway) !/bin/sh # S�tt standard regler /sbin/iptables -P INPUT DROP /sbin/iptables -P FORWARD DROP /sbin/iptables -P OUTPUT ACCEPT # Rensa bort gamla regler /sbin/iptables -F /sbin/iptables -t nat -F # Rensa bort gamla kedjor #/sbin/iptables -X # Skapa logdrop kedjan #/sbin/iptables -N logdrop #/sbin/iptables -A logdrop -j LOG #/sbin/iptables -A logdrop -j DROP # �ppna INPUT kedjan f�r etablerade och ineterna n�tet. /sbin/iptables -A INPUT -i eth1 -j ACCEPT /sbin/iptables -A INPUT -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT # Rejecta alla inkommande packet f�r INPUT /sbin/iptables -A INPUT -p tcp -i eth0 -j REJECT --reject-with tcp-reset /sbin/iptables -A INPUT -p udp -i eth0 -j REJECT --reject-with icmp-port-unreachable # �ppna FORWARD kedjan f�r etablerade och interna n�tet. /sbin/iptables -A FORWARD -i eth1 -j ACCEPT /sbin/iptables -A FORWARD -i eth0 -m state --state ESTABLISHED,RELATED -j ACCEPT /sbin/iptables -A FORWARD -p tcp -i eth0 -j REJECT --reject-with tcp-reset /sbin/iptables -A FORWARD -p udp -i eth0 -j REJECT --reject-with icmp-port-unreachable #/sbin/iptables -t nat -A PREROUTING -i eth1 -j ACCEPT echo "1" > /proc/sys/net/ipv4/ip_forward /sbin/iptables -t nat -A POSTROUTING -s 192.168.0.0/24 -o eth0 -j MASQUERADE ------------------------ Martin Jinnestrand