Security Basics mailing list archives

Re: Suspected nmap listing - am I under attack?


From: Zapotek <zapotekzsp () gmail com>
Date: Wed, 18 Oct 2006 20:49:35 +0300

Filtered in your case means that the services that use these ports are not accessible from the outside world. Try to telnet your machine from a remote server, I bet you won't get a connection.

I hope I answered your question,
Zapotek.

fahimdxb () gmail com wrote:
Did an nmap scan on my Cisco router from the outside world. Found the following output:

Interesting ports on *.*.*.1:

Not shown: 1676 closed ports
PORT      STATE    SERVICE
23/tcp    filtered telnet
135/tcp   filtered msrpc
1524/tcp  filtered ingreslock
27665/tcp filtered Trinoo_Master

There is a Cisco PIX behind the inside interface though I ran nmap from across the serial.
What does the state "filtered" signify?

How can I be sure if I have been used as an agent for launching DDoS attack?

Please advise!!

---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------




---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence in Information Security. Our program offers unparalleled Infosec management education and the case study affords you unmatched consulting experience. Using interactive e-Learning technology, you can earn this esteemed degree, without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------


Current thread: