Re: DENY x REJECT

["R. DuFresne" <dufresne () sysinfo com>]

You may find this useful:

lynx http://www.sys-security.com/html/projects/X.html


Thanks,

Ron DuFresne


On Wed, 3 Oct 2001, Rosenau wrote:

> Hi
>
> Does anybody know a port scanner that could distinguish a "deny" filtered
> tcp port (firewall drops packets for the port) from a "reject" filtered tcp
> port (firewall returns an ICMP - port unreachable)?.
>
> Nmap seems to report boths cases simply as "filtered". Actually, both cases
> are filtered, but when you receive a ICMP, you can be sure that the port is
> really filtered. If you do not receive nothing, the port could be filtered,
> or packets could have been lost...
>
> Regards,
> Rosenau.
>
>
>
> ----------------------------------------------------------------------------
> This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
> Service. For more information on SecurityFocus' SIA service which
> automatically alerts you to the latest security vulnerabilities please see:
> https://alerts.securityfocus.com/

-- 
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
        admin & senior consultant:  darkstar.sysinfo.com
                  http://darkstar.sysinfo.com

"Cutting the space budget really restores my faith in humanity.  It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation."
                -- Johnny Hart

testing, only testing, and damn good at it too!


----------------------------------------------------------------------------
This list is provided by the SecurityFocus Security Intelligence Alert (SIA)
Service. For more information on SecurityFocus' SIA service which
automatically alerts you to the latest security vulnerabilities please see:
https://alerts.securityfocus.com/