[no subject]

> On Wed, 2005-12-07 at 16:43 -0500, Christopher Fowler wrote:
> > Can someone tell me how nmap sees "filtered" ports?  I've got my rule se
> > to reject and nmap can see that something is there but it is being
> > rejected.  I thought "REJECT" would appear as if there was no one bind
> > ()'ing on that port?
> > 
> > 
> -j REJECT --reject-with icmp-host-prohibited

Unbound TCP ports should return a reset, so

iptables -p tcp -j REJECT --reject-with tcp-reset

would be preferable - looks the same as if the tcp port's not bound

For udp,

iptables -p udp -j REJECT

does the right thing (ICMP port unreachable) by default

later,
chris


</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00076" href="msg00076.html">[ale] Nmap + filtered ports</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
<li><strong><a name="00077" href="msg00077.html">[ale] Nmap + filtered ports</a></strong>
<ul><li><em>From:</em> jkinney at localnetsolutions.com (James P. Kinney III)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00078.html">[ale] Nmap + filtered ports</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00080.html">[ale] Lost keys...</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00077.html">[ale] Nmap + filtered ports</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00195.html">[ale] Nmap + filtered ports</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00079"><strong>Date</strong></a></li>
<li><a href="threads.html#00079"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>