Re: Is there a firewall in place?

["Ivan Coric" <ivan.coric () workcoverqld com au>]

Derek,
A trace route should give you a good indication of whether there's a
firewall inline.

firewalk may help
http://www.packetfactory.net/projects/firewalk/

cheers
Ivan


Ivan Coric, CISSP, RHCE
IT Technical Security Officer
Information Technology
WorkCover Queensland
Ph: (07) 30066414 Fax: (07) 30066424
Email: ivan.coric () workcoverqld com au

> > > Derek Fountain <dflists () iinet net au> 16/11/2004 10:11:24 am >>>
Is it possible to tell if a machine you're port scanning is protected
by a 
firewall of some sort? That is, to tell if the scan is checking the
ports 
open and passed through a firewall, or whether the scan is scanning the

actual machine? The machine in question is running W2K, although nmap's
OS 
detection fails to confirm that.

Are there any tell tale signs that there's a filtering box in the way?





***************************************************************************
Messages included in this e-mail and any of its attachments are those
of the author unless specifically stated to represent WorkCover Queensland. The contents of this message are to be used 
for the intended purpose only and are to be kept confidential at all times.
This message may contain privileged information directed only to the intended addressee/s. Accidental receipt of this 
information should be deleted promptly and the sender notified.
This e-mail has been scanned by Sophos for known viruses.
However, no warranty nor liability is implied in this respect.
**********************************************************************