Re: nmap inconsistent results - via intermedite router?
Available news archives: comp.lang.tcl - comp.lang.python - comp.security.firewalls - sci.crypt - comp.lang.php - comp.lang.javascript
Google
 
Web news.hping.org


comp.security.firewalls archive

Re: nmap inconsistent results - via intermedite router?

From: Sebastian Gottschalk <seppi@seppig.de>
Date: Sun Feb 26 2006 - 16:16:58 CET

ads wrote:
> I have the situation where I have 2 linux machines. Both are sarge and
> both have nmap 3.81.

Most recent version is 4.00.

> One machine is on my home network, the other on the internet.

Wow, what an accurate description.

> When I run an nmap from my home machine to the internet machine, it
> reports the 5190 (aol) port as open amongst the usual ssh etc. If I run
> nmap from the internet machine itself (on its IP address, not loopback
> etc), it does not have 5190 as open!

Different interfaces?

> Having looked into this as much as I can, I think that nmap is picking
> up a port from the home firewall (a DG834G, which is reported as having
> this port specifically left open - amongst others).

So, and where exactly is it located in your network?

> But why does an outgoing request, targetted at a remote server then
> come back with information from another source? How can I test the
> server remotely if it doesn't bring back the right details?

Because your ISP is filtering traffic?
Received on Mon May 1 00:53:11 2006