umweber on Sat, 4 Sep 1999 23:35:51 -0400 (EDT)


[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

Re: [Plug] nmap output


Oh and 1080 (socks) too.


-- 
Michelle Weber
umweber@mcs.drexel.edu


On Sat, 4 Sep 1999 umweber@mcs.drexel.edu wrote:

> While we're on the subject of nmap, no matter who I scan on my own box,
> or if I scan my own box from somewhere else, it always says ports 137,
> 138, and 139 are filtered (these are netbios ports).  What would cause
> this? Someone suggested a firewall, but I am not running any type of
> firewall, or any other daemons (that I know of) which  have anything to do
> with these ports.  Could my isp be doing this? (I have a Suburban@Home
> cable modem).
> 
> Thanks,
> 
> -- 
> Michelle Weber
> umweber@mcs.drexel.edu
> 
> 
> On Sat, 4 Sep 1999, Daniel W. Ottey wrote:
> 
> > Just a little FYI, because its a "mistake" I made...  Make sure you run
> > nmap from a machine other than the machine you are testing.  If you run
> > nmap on the local machine, you will miss some ports that arre open, which
> > nmaap doesn't see...
> > 
> > Daniel W. Ottey
> > Pre-Junior Information Systems Student
> > Drexel University - Philadelphia, PA
> > http://www.snarfykat.org/
> > AOL Instant Messenger: Snarf2002 - http://www.aim.aol.com/
> > ICQ: 5723666 - http://www.mirabilis.com/
> > IRC: ThundrKat - http://www.undernet.org/
> > 
> > 
> > On Sat, 4 Sep 1999, Darxus wrote:
> > 
> > >
> > > Got nmap working.
> > >
> > > Removed all services from /etc/inetd.conf except ftp & telnet (will
> > > probably remove telnet soon).  Did a killall -HUP inetd to re-read the
> > > config file.  Killed lpd & removed its startup script.
> > >
> > > nmap's output is currently:
> > >
> > > 21      open        tcp        ftp
> > > 22      open        tcp        ssh
> > > 23      open        tcp        telnet
> > > 53      open        tcp        domain
> > > 111     open        tcp        sunrpc
> > > 113     open        tcp        auth
> > >
> > > Okay, also have DNS (gotta make that only respond to localhost).
> > >
> > > So what is RPC (which I remember you guys mentioning), do I need it, and
> > > if not, how do I get rid of it ?
> > >
> > > __________________________________________________________________
> > > PGP fingerprint = 03 5B 9B A0 16 33 91 2F  A5 77 BC EE 43 71 98 D4
> > >             darxus@op.net / http://www.op.net/~darxus
> > >                          Far Beyond Reason
> > >
> > >
> > > _______________________________________________
> > > Plug maillist  -  Plug@lists.nothinbut.net
> > > http://lists.nothinbut.net/mail/listinfo/plug
> > >
> > 
> > 
> > _______________________________________________
> > Plug maillist  -  Plug@lists.nothinbut.net
> > http://lists.nothinbut.net/mail/listinfo/plug
> > 
> 
> 
> _______________________________________________
> Plug maillist  -  Plug@lists.nothinbut.net
> http://lists.nothinbut.net/mail/listinfo/plug
> 


_______________________________________________
Plug maillist  -  Plug@lists.nothinbut.net
http://lists.nothinbut.net/mail/listinfo/plug