RE: Help with filtered ports

["Mike" <mike_sha () shaw ca>]

It simply means that the firewall is explicitly blocking that port.  If
it's not blocking the port entirely, it could be allowing traffic to
that port only from specified IP addresses.  I would run a netstat -tnap
on the machine's local console and see what's running, as a start.

Mike Fetherston

> -----Original Message-----
> From: Juan B [mailto:juanbabi () yahoo com]
> Sent: Sunday, November 14, 2004 12:42 AM
> To: security-basics () securityfocus com
> Subject: Help with filtered ports
>
> Hi!
>
> I scan with nmap a host in the dmz,I found those ports
> filtered:
>
> 6699/tcp   filtered    napster
> 8888/tcp   filtered    sun-answerbook
> 12345/tcp  filtered    NetBus
> 12346/tcp  filtered    NetBus
> 27374/tcp  filtered    subseven
> 27665/tcp  filtered    Trinoo_Master
>
> I know that subseven and netbus are trojans but what
> does in mean filtered? what is the best sulution to
> fix this problem? format and install this machine?
>
> what is the differance between open and filter ports?
> thanks !!!
>
>
>
> __________________________________
> Do you Yahoo!?
> Check out the new Yahoo! Front Page.
> www.yahoo.com