From: Pascal Hambourg <pascal.mail@plouf.fr.eu.org>
To: netfilter@lists.netfilter.org
Subject: Re: Status open , filtered
Date: Fri, 23 Jun 2006 17:30:36 +0200 [thread overview]
Message-ID: <449C091C.4060309@plouf.fr.eu.org> (raw)
In-Reply-To: <12ec50350606230755u68e1ad42p8c95714d208fad8c@mail.gmail.com>
Hello,
Fabio S. Silva a écrit :
> Hi all, i have a question, i make a firewall but when i make a scan
> using nmap it returns to me that the ports are in state filtered no
> close
What type of scan ? Which iptables target do you use to filter
connection attempts on ports you want to close ? DROP or REJECT (if so,
what type of reject) ?
My results with nmap 2.54 various TCP scans :
(better displayed with a fixed-sized font)
Target / TCP scan type -T(connect) -S(syn) -F(fin) -X(Xmas) -N(null)
DROP filtered filtered open open open
REJECT icmp-port-unreach closed filtered filtered filtered filtered
REJECT tcp-reset closed closed closed closed closed
prev parent reply other threads:[~2006-06-23 15:30 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-06-23 14:55 Status open , filtered Fabio S. Silva
2006-06-23 15:01 ` Mike
2006-06-23 15:07 ` Fabio S. Silva
2006-06-23 15:30 ` Pascal Hambourg [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=449C091C.4060309@plouf.fr.eu.org \
--to=pascal.mail@plouf.fr.eu.org \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.