Penetration Testing mailing list archives

RE: nmap showing port 21 (ftp) open, but port is actually closed


From: "Drage, Nick" <nick.drage () eds com>
Date: Fri, 16 Sep 2005 12:43:58 +0100

Is it 'closed' or firewalled?  A firewalled port will show as 
filtered since it will not receive the response reporting that 
it is closed.
Therefore, it cannot be distinguished between open/filtered.

I presume that you're referring to UDP scans, whereas for this FTP
related issue its likely that TCP is being used.  If not please explain,
because I'm missing something if that's the case.

-- 
Nick Drage
EDS UK Penetration Testing Team

------------------------------------------------------------------------------
Audit your website security with Acunetix Web Vulnerability Scanner:

Hackers are concentrating their efforts on attacking applications on your
website. Up to 75% of cyber attacks are launched on shopping carts, forms,
login pages, dynamic content etc. Firewalls, SSL and locked-down servers are
futile against web application hacking. Check your website for vulnerabilities
to SQL injection, Cross site scripting and other web attacks before hackers do!
Download Trial at:

http://www.securityfocus.com/sponsor/pen-test_050831
-------------------------------------------------------------------------------


Current thread: