Re: open ports 25/tcp and 110/tcp

["David F. Strauch" <dstrauch@cyberlink.com>]

Yes, Antony this is the case.  I have only one WinXP machine that I am
testing with.  I'm testing the external interface eth0 and I have unplugged
eth1 from the hub.

When I nmap -sT -p 25,110 -P0 xx.xx.xx.xx I get the following output form
nmap:

Starting nmap V. 3.00 ( www.insecure.org/nmap )
Interesting ports on  (67.153.34.147):
Port       State       Service
25/tcp     open        smtp
110/tcp    open        pop-3

Nmap run completed -- 1 IP address (1 host up) scanned in 1 second

----- Original Message ----- 
From: "Antony Stone" <Antony@Soft-Solutions.co.uk>
To: <netfilter@lists.netfilter.org>
Sent: Wednesday, December 03, 2003 5:39 PM
Subject: Re: open ports 25/tcp and 110/tcp


> On Wednesday 03 December 2003 11:32 pm, David F. Strauch wrote:
>
> > Antony,
> >
> > I tried telnet from my WinXP machine to both open ports without any
> > responce.  I'm hosting neither services on this machine.  It will be a
> > gateway machine with a very minimal hardened installation.
>
> Are you saying that from the same machine you did "nmap -sT -F -P0 -O
> xx.xx.xx.xx" and got a report including "SMTP port 25 open" and "POP3 port
> 110 open", and also doing "telnet xx.xx.xx.xx 25" gives no response?
>
> That makes no sense, because nmap -sT means a full TCP connect - the same
as
> the telnet command would do.
>
> Please confirm whether I am understanding correctly that you are doing
both
> these tests from the same machine to the same address and getting
different
> answers?
>
> Antony.
>
> -- 
> All matter in the Universe can be placed into one of two categories:
>
> 1. Things which need to be fixed.
> 2. Things which need to be fixed once you've had a few minutes to play
with
> them.
>
>                                                      Please reply to the
list;
>                                                            please don't CC
me.
>
>
>
>