Re: non existing DNS leads to localhost as target

[rembrandt () jpberlin de]

Maybe the topic isn`t "correct" but my english sometimes lacks...

If a DNS entry does not exist nmap seams to take the localhost (external
IP of the local mashine) and scans this mashine except of telling the user
that the target can`t get resolved.


wizzard $ host news.jpberlin.de
Host news.jpberlin.de not found: 3(NXDOMAIN)
wizzard $ sudo nmap -P0 -sSV -vvv  news.jpberlin.de
Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2006-09-11 11:41 CEST
Initiating SYN Stealth Scan against wizzard.helith.org (xx.xx.xx.x) [1680
ports] at 11:41
Discovered open port xx/tcp on xx.xx.xx.xx
Discovered open port xx/tcp on xx.xx.xx.xx
Discovered open port xx/tcp on xx.xx.xx.xx
caught SIGINT signal, cleaning up
wizzard $ host somewhere.over.the.ocean.int
Host somewhere.over.the.ocean.int not found: 3(NXDOMAIN)
wizzard $ sudo nmap -P0 -sSV -vvv somewhere.over.the.ocean.int

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2006-09-11 11:44 CEST
Initiating SYN Stealth Scan against wizzard.helith.org (xx.xx.xx.xx) [1680
ports] at 11:44
Discovered open port xx/tcp on xx.xx.xx.xx
Discovered open port xx/tcp on xx.xx.xx.xx
Discovered open port xx/tcp on xx.xx.xx.xx
caught SIGINT signal, cleaning up

As you can see NMAP seams to alwas take the external IP of the local
mashine if the target can`t get resolved.

OS: OpenBSD 3.9 STABLE
NMAP: 4.11

Kind regards,
Rembrandt


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org