[no subject]

Good point.

I'm working on a hack to iptables that allows a 
-j REJECT --reject-with BillRulz

Seems like a fun waste of time. or better
 --reject-with forwarded-address-to-FBI
> 
> Bob Toxen
> bob at verysecurelinux.com               [Please use for email to me]
&gt; <a  rel="nofollow" href="http://www.verysecurelinux.com";>http://www.verysecurelinux.com</a>        [Network&amp;Linux/Unix security consulting]
&gt; <a  rel="nofollow" href="http://www.realworldlinuxsecurity.com";>http://www.realworldlinuxsecurity.com</a> [My book:&quot;Real World Linux Security 2/e&quot;]
&gt; Quality Linux &amp; UNIX security and SysAdmin &amp; software consulting since 1990.
&gt; 
&gt; &quot;Microsoft: Unsafe at any clock speed!&quot;
&gt;    -- Bob Toxen 10/03/2002
&gt; 
&gt; On Wed, Dec 07, 2005 at 04:54:36PM -0500, James P. Kinney III wrote:
&gt; &gt; On Wed, 2005-12-07 at 16:43 -0500, Christopher Fowler wrote:
&gt; &gt; &gt; Can someone tell me how nmap sees &quot;filtered&quot; ports?  I've got my rule se
&gt; &gt; &gt; to reject and nmap can see that something is there but it is being
&gt; &gt; &gt; rejected.  I thought &quot;REJECT&quot; would appear as if there was no one bind
&gt; &gt; &gt; ()'ing on that port?
&gt; &gt; &gt; 
&gt; &gt; &gt; 
&gt; &gt; -j REJECT --reject-with icmp-host-prohibited
&gt; &gt; 
&gt; &gt; Shows on a nmap scan as &quot;closed&quot;
&gt; &gt; &gt; _______________________________________________
&gt; &gt; &gt; Ale mailing list
&gt; &gt; &gt; Ale at ale.org
&gt; &gt; &gt; <a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>
&gt; &gt; -- 
&gt; &gt; James P. Kinney III          \Changing the mobile computing world/
&gt; &gt; CEO &amp; Director of Engineering \          one Linux user         /
&gt; &gt; Local Net Solutions,LLC        \           at a time.          /
&gt; &gt; 770-493-8244                    \.___________________________./
&gt; &gt; <a  rel="nofollow" href="http://www.localnetsolutions.com";>http://www.localnetsolutions.com</a>
&gt; &gt; 
&gt; &gt; GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
&gt; &gt; &lt;jkinney at localnetsolutions.com&gt;
&gt; &gt; Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
&gt; 
&gt; 
&gt; 
&gt; &gt; _______________________________________________
&gt; &gt; Ale mailing list
&gt; &gt; Ale at ale.org
&gt; &gt; <a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>
&gt; _______________________________________________
&gt; Ale mailing list
&gt; Ale at ale.org
&gt; <a  rel="nofollow" href="http://www.ale.org/mailman/listinfo/ale";>http://www.ale.org/mailman/listinfo/ale</a>
-- 
James P. Kinney III          \Changing the mobile computing world/
CEO &amp; Director of Engineering \          one Linux user         /
Local Net Solutions,LLC        \           at a time.          /
770-493-8244                    \.___________________________./
<a  rel="nofollow" href="http://www.localnetsolutions.com";>http://www.localnetsolutions.com</a>

GPG ID: 829C6CA7 James P. Kinney III (M.S. Physics)
&lt;jkinney at localnetsolutions.com&gt;
Fingerprint = 3C9E 6366 54FC A3FE BA4D 0659 6190 ADC3 829C 6CA7
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part



</pre>
<!--X-Body-of-Message-End-->
<!--X-MsgBody-End-->
<!--X-Follow-Ups-->
<hr>
<!--X-Follow-Ups-End-->
<!--X-References-->
<ul><li><strong>References</strong>:
<ul>
<li><strong><a name="00076" href="msg00076.html">[ale] Nmap + filtered ports</a></strong>
<ul><li><em>From:</em> cfowler at outpostsentinel.com (Christopher Fowler)</li></ul></li>
<li><strong><a name="00077" href="msg00077.html">[ale] Nmap + filtered ports</a></strong>
<ul><li><em>From:</em> jkinney at localnetsolutions.com (James P. Kinney III)</li></ul></li>
<li><strong><a name="00195" href="msg00195.html">[ale] Nmap + filtered ports</a></strong>
<ul><li><em>From:</em> transam at verysecurelinux.com (Bob Toxen)</li></ul></li>
</ul></li></ul>
<!--X-References-End-->
<!--X-BotPNI-->
<ul>
<li>Prev by Date:
<strong><a href="msg00195.html">[ale] Nmap + filtered ports</a></strong>
</li>
<li>Next by Date:
<strong><a href="msg00197.html">[ale] Cereal Box Advertising</a></strong>
</li>
<li>Previous by thread:
<strong><a href="msg00195.html">[ale] Nmap + filtered ports</a></strong>
</li>
<li>Next by thread:
<strong><a href="msg00206.html">[ale] Nmap + filtered ports</a></strong>
</li>
<li>Index(es):
<ul>
<li><a href="maillist.html#00196"><strong>Date</strong></a></li>
<li><a href="threads.html#00196"><strong>Thread</strong></a></li>
</ul>
</li>
</ul>

<!--X-BotPNI-End-->
<!--X-User-Footer-->
<!--X-User-Footer-End-->
</body>
</html>