RE: how nmap can know my firewalled servers ?

["Jay Stapleton" <jay.stapleton () computershare com>]

Hi Alexey.

Are you running Nmap from a machine inside your firewall?  Perhaps the
same machine which is running the services?

Very few firewall implementations block localhost.

-Jay Stapleton. 

-----Original Message-----
From: Alexey Eremenko [mailto:al4321 () gmail com] 
Sent: Wednesday, April 12, 2006 2:24 PM
To: security-basics () securityfocus com
Subject: how nmap can know my firewalled servers ?

Hi all !

I know that "nmap" can show open ports. But nmap also shows my
firewalled ports !
How?

Since some servers (like apache) are firewalled with iptables, how can
nmap know wherever
my system run the service with open port, filtered port or doesn't run
it at all ?

******************************************************************************
This email and any files transmitted with it are solely intended for the use of the addressee(s) and may contain 
information that is confidential and privileged.  If you receive this email in error, please advise us by return email 
immediately.  Please also disregard the contents of the email, delete it and destroy any copies immediately. 

Computershare Limited and its subsidiaries do not accept liability for the views expressed in the email or for the 
consequences of any computer viruses that may be transmitted with this email. 

This email is also subject to copyright.  No part of it should be reproduced, adapted or transmitted without the 
written consent of the copyright owner.
******************************************************************************


-------------------------------------------------------------------------
This List Sponsored by: Webroot

Don't leave your confidential company and customer records un-protected.
Try Webroot's Spy Sweeper Enterprise(TM) for 30 days for FREE with no
obligation. See why so many companies trust Spy Sweeper Enterprise to
eradicate spyware from their networks.
FREE 30-Day Trial of Spy Sweeper Enterprise

http://www.webroot.com/forms/enterprise_lead.php
--------------------------------------------------------------------------