Nmap & Whonix Issue

[Distorchion Zero <distorchion () gmail com>]

Hi,

I've just configured a virtual environment with Whonix (the new TorBox from
the Torproject http://sourceforge.net/p/whonix/wiki/Home/). It consists of
one virtual machine running Tor proxy and the other machine would be the
workstation.

In the workstation I've been trying to run Nmap to scan ports of some
hosts, but the result of the scan is always the same. It doesn't matter
which host I'm scanning or which options I use, the result is the same. And
it gets a lot of different types of open ports, from 0 to 65389.

I'm starting to think that Nmap is actually scanning the proxy address I'm
on at that moment. If this is the case what can I do in order to really
scan the desired hosts? If it is not where do these ports come from?
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://seclists.org/nmap-dev/