Security Basics mailing list archives

Re: nmap status question


From: gminick <gminick () bsd sim pl>
Date: Tue, 29 Jul 2003 08:48:55 +0200

On Mon, Jul 28, 2003 at 06:03:26PM -0000, marc brown wrote:
i am new to linux but after getting my rh9 box running
i have started to use nmap to do some scanning of my
networks.  can someone tell me exactly what it means
when the state of a particular port is 'filtered'?  
Ugly RTFM, really...

       The  result of running nmap is usually a list of interest-
       ing ports on the machine(s) being scanned (if any).   Nmap
       always  gives  the  port's  "well  known" service name (if
       any), number, state, and protocol.  The  state  is  either
       'open',  'filtered', or 'unfiltered'.  Open means that the
       target machine will accept()  connections  on  that  port.
       Filtered  means  that a firewall, filter, or other network
       obstacle is covering the port  and  preventing  nmap  from
       determining  whether  the  port is open.  Unfiltered means
       that the port is known by nmap to be closed and  no  fire-
       wall/filter  seems  to be interfering with nmap's attempts
       to determine this.  Unfiltered ports are the  common  case
       and  are  only shown when most of the scanned ports are in
       the filtered state.

Isn't it clear?

-- 
[ Wojtek Walczak - gminick (at) underground.org.pl ]
[       <http://underground.org.pl/gminick/>       ]
[ "...rozmaite zwroty, matowe od patyny dawnosci." ]


---------------------------------------------------------------------------
----------------------------------------------------------------------------


Current thread: