Nmap scanning issue / pings?

["Joshua Perrymon" <josh.perrymon () purehacking com>]

Hey Guys,

I'm setting up a test network for our lab..

I'm testing outbound scans using Nmap to verify device configuration so
on...

If I ping 1.1.1.1 for instance, I get a reply.. ( 1.1.1.1 is obfuscated )

C:\Documents and Settings\yo>ping 1.1.1.1

Pinging 1.1.1.1 with 32 bytes of data:

Reply from 1.1.1.1: bytes=32 time=359ms TTL=238


If I nmap the device It says ports are filtered..( I know telnet is open)

:\Documents and Settings\yo>nmap 1.1.1.1 -p 23

tarting Nmap 3.95 ( http://www.insecure.org/nmap ) at 2006-05-17 16:5
nteresting ports on 1.1.1.1
PORT   STATE    SERVICE
23/tcp filtered telnet

nmap finished: 1 IP address (1 host up) scanned in 0.937 seconds


However, if I do "nmap 1.1.1.1 -P0" it comes back as open.. I have tested
this on 3 different boxes with the same results..
The network allows ICMP / traceroutes to the host with no problems.

C:\Documents and Settings\yo>nmap 1.1.1.1-p 23 -P0

Starting Nmap 3.95 ( http://www.insecure.org/nmap ) at 2006-05-17 16:59 AUS
Eastern Standard Ti
Interesting ports on 1.1.1.1:
PORT   STATE SERVICE
23/tcp open  telnet

Nmap finished: 1 IP address (1 host up) scanned in 0.828 seconds


Summary: So when I perform a standard nmap scan to the IP address it returns
nothing open only "filtered". I can ping the device and I know telnet is
open.. HOWEVER, when I add the -P0 it returns the port as open??



_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev