On Mon, Jul 28, 2003 at 06:03:26PM -0000, marc brown wrote: > i am new to linux but after getting my rh9 box running > i have started to use nmap to do some scanning of my > networks. can someone tell me exactly what it means > when the state of a particular port is 'filtered'? Ugly RTFM, really...
The result of running nmap is usually a list of interest- ing ports on the machine(s) being scanned (if any). Nmap always gives the port's "well known" service name (if any), number, state, and protocol. The state is either 'open', 'filtered', or 'unfiltered'. Open means that the target machine will accept() connections on that port. Filtered means that a firewall, filter, or other network obstacle is covering the port and preventing nmap from determining whether the port is open. Unfiltered means that the port is known by nmap to be closed and no fire- wall/filter seems to be interfering with nmap's attempts to determine this. Unfiltered ports are the common case and are only shown when most of the scanned ports are in the filtered state. Isn't it clear? -- [ Wojtek Walczak - gminick (at) underground.org.pl ] [ <http://underground.org.pl/gminick/> ] [ "...rozmaite zwroty, matowe od patyny dawnosci." ] --------------------------------------------------------------------------- ----------------------------------------------------------------------------