The machine that you are scanning from could be filtering these ports outgoing. Additionally, if the remote machine is on a different subnet, the router or routers between the two machines could be filtering these ports. Geoff Traugott Director of Systems Administration Community TechKnowledge, Inc. 877-441-2111 (Toll Free) 512-345-9090 (Main) 512-345-9091 (Fax) CTK provides affordable, customized web-based data management solutions for the nonprofit community. Corporate Headquarters: 9005 Mountain Ridge Drive Bowie Building, Suite 100 Austin, TX 78759 geoff@communitytech.net http://www.communitytech.net |--------+-----------------------------------------> | | David Correa | | | <tech@linux-tech.com> | | | Sent by: | | | security-discuss-bounce@linuxse| | | curity.com | | | | | | | | | 05/03/2002 01:07 PM | | | Please respond to | | | security-discuss | | | | |--------+-----------------------------------------> >-----------------------------------------------------------------------------------------------------------| | | | To: security-discuss@linuxsecurity.com | | cc: | | Subject: Re: Port Scan Question (kinda urgent) | >-----------------------------------------------------------------------------------------------------------| On Fri, 3 May 2002, Italo Antonio wrote: > Nmap reports these ports as "filtered" because they arent returning > "closed messages", your firewall rules probably has "DROP" instead of > "REJECT" for connections on these ports, check that. Italo thanks for your feed back =) But using the same technique on other computer with the same iptables script does not return filtered on these ports. Also, It did the same when it had ipchains on it, and it had REJECT, not DENY. I am curious about what other people think about this. > About the chkrootkit problem, I dont know what may be happening, sorry. > Italo. Thanks anyway. Maybe someone else here has tried that program. David Correa Public Key http://www.linux-tech.com/linuxtech.asc Key fingerprint 7F2C E072 479D 71B4 008B 373E A284 8CDE 7659 F5D8 ------------------------------------------------------------------------ To unsubscribe email security-discuss-request@linuxsecurity.com with "unsubscribe" in the subject of the message. ------------------------------------------------------------------------ To unsubscribe email security-discuss-request@linuxsecurity.com with "unsubscribe" in the subject of the message.
