Dotaz: nmap + localhost + firewall

[lubo]

Dobry den mam taky mensi problem a neviem si s nym rady.

root@localhost: nmap localhost
Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2005-02-17 00:09 CET
Interesting ports on localhost (127.0.0.1):
(The 1655 ports scanned but not shown below are in state: closed)
PORT    STATE SERVICE
25/tcp  open  smtp
111/tcp open  rpcbind
631/tcp open  ipp
929/tcp open  unknown

Nmap run completed -- 1 IP address (1 host up) scanned in 1.037 seconds

ale ked zadam svoju ip tak odrazu nemam porty otvorene

root@localhost:~ # nmap 10.x.x.xxx

Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2005-02-17 00:11 CET
All 1659 scanned ports on 10.x.x.xxx are: closed

Nmap run completed -- 1 IP address (1 host up) scanned in 1.045 seconds

Ale ziadne pravidla v iptables nemam zadane

root@localhost:~ # iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination

tak neviem co je stym. Dakujem za kazdu radu ci pomoc

Odpovědi

[jm]

No tak ti demoni asi poslouchaji jenom na localhostu, ne?

[Pavel Stárek]

Nevím, mě to taky dá trošku jiné výsledky:

[root@pavel root]# nmap localhost
 
Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2005-02-17 00:53 CET
Interesting ports on pavel.arget (127.0.0.1):
(The 1650 ports scanned but not shown below are in state: closed)
PORT      STATE SERVICE
22/tcp    open  ssh
25/tcp    open  smtp
111/tcp   open  rpcbind
139/tcp   open  netbios-ssn
445/tcp   open  microsoft-ds
631/tcp   open  ipp
783/tcp   open  hp-alarm-mgr
3306/tcp  open  mysql
10000/tcp open  snet-sensor-mgmt
 
Nmap run completed -- 1 IP address (1 host up) scanned in 1.186 seconds
[root@pavel root]# nmap 192.168.0.3
 
Starting nmap 3.50 ( http://www.insecure.org/nmap/ ) at 2005-02-17 00:53 CET
Interesting ports on 192.168.0.3:
(The 1653 ports scanned but not shown below are in state: closed)
PORT      STATE SERVICE
22/tcp    open  ssh
111/tcp   open  rpcbind
139/tcp   open  netbios-ssn
445/tcp   open  microsoft-ds
3306/tcp  open  mysql
10000/tcp open  snet-sensor-mgmt
 
Nmap run completed -- 1 IP address (1 host up) scanned in 1.178 seconds

Třeba smtp (sendmail) je ve Fedoře defaultně nastavený aby poslouchal jen na localhostu, proto není v tom mém spodním výpisu. Takže jak psal jm, Vaše služby zřejmě poslouchají jen na localhostu.

[Radek Hladik]

viz

netstat -a --tcp

, je tam videt seznam vsech spojeni na TCP, vcetne tech co posloucaji. Ty tam maji neco jako:

127.0.0.1:80  LISTEN

nebo

*:80  LISTEN

v prvnim priade posloucha jenom na loopbacku, v druhem pripade na vsech rozhranich. -p jeste ukaze, ktery program to "obhospodaruje"

Radek P.S. Nekamenujte me za pouzivani netstatu, pokud se toho sameho da dosahnout pres ip, rad se necham poucit :)

[Pavel Stárek]

Já tě kamenovat nebudu Netstat je normální nástroj, a už kolikrát mi vytrhl trn z paty a to i ve Win.