Re: UDP port scanning...

[Darren Reed <avalon () coombs anu edu au>]

I must have written my original email in French - it seems like only 1 in
10 people (or therebaouts) actually understood what I wrote.  Or maybe the
1:10 ratio reflects the number of script kiddies on this list ;-)

Darren

In some mail from Simple Nomad, sie said:
> Yes but if the firewall or router is simply dropping the packets (common
> with filter-based rules) then all UDP ports will show up as open, when in
> fact they are not.
>
> -         Simple Nomad          -  No rest for the Wicca'd  -
> -      thegnome () nmrc org        -        www.nmrc.org       -
> -  thegnome () razor bindview com  -      www.bindview.com     -
>
> On Wed, 9 Feb 2000, Darren Reed wrote:
>
> > It maybe worthwhile putting in a note when doing UDP scan that the
> > "open ports" are generated when no packets are received back.  Too
> > many lay people seem to assume that "all UDP ports open" as reported
> > by nmap is a `bad thing' when in fact it's a good thing(tm).
> >
> > Darren