Re: open ports 25/tcp and 110/tcp

[Antony Stone <Antony@Soft-Solutions.co.uk>]

On Wednesday 03 December 2003 11:58 pm, David F. Strauch wrote:

> Yes, Antony this is the case.  I have only one WinXP machine that I am
> testing with.  I'm testing the external interface eth0 and I have unplugged
> eth1 from the hub.
>
> When I nmap -sT -p 25,110 -P0 xx.xx.xx.xx I get the following output form
> nmap:
>
> Starting nmap V. 3.00 ( www.insecure.org/nmap )
> Interesting ports on  (67.153.34.147):
> Port       State       Service
> 25/tcp     open        smtp
> 110/tcp    open        pop-3
>
> Nmap run completed -- 1 IP address (1 host up) scanned in 1 second

Well, that just makes no sense to me.   If nmap -sT reports a port open, then 
a telnet to that port from the same machine as the nmap test was done should 
present a welcome banner (for services which provide one, such as SMTP and 
POP3).

Maybe someone else here has a clue what strangeness is going on?

Antony.

-- 
The first fifty percent of an engineering project takes ninety percent of the 
time, and the remaining fifty percent takes another ninety percent of the 
time.

                                                     Please reply to the list;
                                                           please don't CC me.