You are not logged in.

#1 2010-07-28 16:03:38

TheRealHoboBen
Member
Registered: 2008-12-02
Posts: 11

nmap says absolutely everything is open?

This really, really, had me pulling my hair out all day trying to configure the iptables of my VPS...

Testing from my laptop with nmap, *everyting* seems open! No matter if the domain doesn't even exist!

nmap -PN 1.2.3.4

Starting Nmap 5.21 ( http://nmap.org ) at 2010-07-28 16:59 BST
Nmap scan report for 1.2.3.4
Host is up (0.0015s latency).
PORT      STATE SERVICE
1/tcp     open  tcpmux
3/tcp     open  compressnet
4/tcp     open  unknown
6/tcp     open  unknown
7/tcp     open  echo
9/tcp     open  discard
13/tcp    open  daytime
17/tcp    open  qotd
19/tcp    open  chargen
20/tcp    open  ftp-data
21/tcp    open  ftp
22/tcp    open  ssh
23/tcp    open  telnet
24/tcp    open  priv-mail
25/tcp    open  smtp
26/tcp    open  rsftp
30/tcp    open  unknown
32/tcp    open  unknown
33/tcp    open  dsp
37/tcp    open  time
42/tcp    open  nameserver
43/tcp    open  whois
49/tcp    open  tacacs
53/tcp    open  domain
70/tcp    open  gopher
79/tcp    open  finger
80/tcp    open  http
81/tcp    open  hosts2-ns
82/tcp    open  xfer
83/tcp    open  mit-ml-dev
84/tcp    open  ctf
85/tcp    open  mit-ml-dev
88/tcp    open  kerberos-sec
89/tcp    open  su-mit-tg
90/tcp    open  dnsix
99/tcp    open  metagram
100/tcp   open  newacct
106/tcp   open  pop3pw
109/tcp   open  pop2
110/tcp   open  pop3
111/tcp   open  rpcbind
113/tcp   open  auth
119/tcp   open  nntp
125/tcp   open  locus-map
135/tcp   open  msrpc
139/tcp   open  netbios-ssn
143/tcp   open  imap
144/tcp   open  news
146/tcp   open  iso-tp0
161/tcp   open  snmp
163/tcp   open  cmip-man
179/tcp   open  bgp
199/tcp   open  smux
211/tcp   open  914c-g
212/tcp   open  anet
222/tcp   open  rsh-spx
254/tcp   open  unknown
255/tcp   open  unknown
256/tcp   open  fw1-secureremote
259/tcp   open  esro-gen
264/tcp   open  bgmp
280/tcp   open  http-mgmt
301/tcp   open  unknown
306/tcp   open  unknown
311/tcp   open  asip-webadmin
340/tcp   open  unknown
366/tcp   open  odmr
389/tcp   open  ldap
406/tcp   open  imsp
407/tcp   open  timbuktu
416/tcp   open  silverplatter
417/tcp   open  onmux
425/tcp   open  icad-el
427/tcp   open  svrloc
443/tcp   open  https
444/tcp   open  snpp
445/tcp   open  microsoft-ds
458/tcp   open  appleqtc
464/tcp   open  kpasswd5
465/tcp   open  smtps
481/tcp   open  dvs
497/tcp   open  retrospect
500/tcp   open  isakmp
512/tcp   open  exec
513/tcp   open  login
514/tcp   open  shell
515/tcp   open  printer
524/tcp   open  ncp
541/tcp   open  uucp-rlogin
543/tcp   open  klogin
544/tcp   open  kshell
545/tcp   open  ekshell
548/tcp   open  afp
554/tcp   open  rtsp
555/tcp   open  dsf
563/tcp   open  snews
587/tcp   open  submission
593/tcp   open  http-rpc-epmap
616/tcp   open  unknown
617/tcp   open  sco-dtmgr
625/tcp   open  apple-xsrvr-admin
631/tcp   open  ipp
636/tcp   open  ldapssl
646/tcp   open  ldp
648/tcp   open  unknown
666/tcp   open  doom
667/tcp   open  unknown
668/tcp   open  unknown
683/tcp   open  corba-iiop
687/tcp   open  unknown
691/tcp   open  resvc
700/tcp   open  unknown
705/tcp   open  unknown
711/tcp   open  unknown
714/tcp   open  unknown
720/tcp   open  unknown
722/tcp   open  unknown
726/tcp   open  unknown
749/tcp   open  kerberos-adm
765/tcp   open  webster
777/tcp   open  unknown
783/tcp   open  spamassassin
787/tcp   open  qsc
800/tcp   open  mdbs_daemon
801/tcp   open  device
808/tcp   open  ccproxy-http
843/tcp   open  unknown
873/tcp   open  rsync
880/tcp   open  unknown
888/tcp   open  accessbuilder
898/tcp   open  sun-manageconsole
900/tcp   open  unknown
901/tcp   open  samba-swat
902/tcp   open  iss-realsecure
903/tcp   open  iss-console-mgr
911/tcp   open  unknown
912/tcp   open  unknown
981/tcp   open  unknown
987/tcp   open  unknown
990/tcp   open  ftps
992/tcp   open  telnets
993/tcp   open  imaps
995/tcp   open  pop3s
999/tcp   open  garcon
1000/tcp  open  cadlock
1001/tcp  open  unknown
1002/tcp  open  windows-icfw
1007/tcp  open  unknown
1009/tcp  open  unknown
1010/tcp  open  unknown
1011/tcp  open  unknown
1021/tcp  open  unknown
1022/tcp  open  unknown
1023/tcp  open  netvenuechat
1024/tcp  open  kdm
1025/tcp  open  NFS-or-IIS
1026/tcp  open  LSA-or-nterm
1027/tcp  open  IIS
1028/tcp  open  unknown
1029/tcp  open  ms-lsa
1030/tcp  open  iad1
1031/tcp  open  iad2
1032/tcp  open  iad3
1033/tcp  open  netinfo
1034/tcp  open  zincite-a
1035/tcp  open  multidropper
1036/tcp  open  unknown
1037/tcp  open  unknown
1038/tcp  open  unknown
1039/tcp  open  unknown
1040/tcp  open  netsaint
1041/tcp  open  unknown
1042/tcp  open  unknown
1043/tcp  open  boinc
1044/tcp  open  unknown
1045/tcp  open  unknown
1046/tcp  open  unknown
1047/tcp  open  unknown
1048/tcp  open  unknown
1049/tcp  open  unknown
1050/tcp  open  java-or-OTGfileshare
1051/tcp  open  optima-vnet
1052/tcp  open  ddt
1053/tcp  open  unknown
1054/tcp  open  unknown
1055/tcp  open  ansyslmd
1056/tcp  open  unknown
1057/tcp  open  unknown
1058/tcp  open  nim
1059/tcp  open  nimreg
1060/tcp  open  polestar
1061/tcp  open  unknown
1062/tcp  open  veracity
1063/tcp  open  unknown
1064/tcp  open  unknown
1065/tcp  open  unknown
1066/tcp  open  fpo-fns
1067/tcp  open  instl_boots
1068/tcp  open  instl_bootc
1069/tcp  open  cognex-insight
1070/tcp  open  unknown
1071/tcp  open  unknown
1072/tcp  open  unknown
1073/tcp  open  unknown
1074/tcp  open  unknown
1075/tcp  open  unknown
1076/tcp  open  sns_credit
1077/tcp  open  unknown
1078/tcp  open  unknown
1079/tcp  open  unknown
1080/tcp  open  socks
1081/tcp  open  unknown
1082/tcp  open  unknown
1083/tcp  open  ansoft-lm-1
1084/tcp  open  ansoft-lm-2
1085/tcp  open  unknown
1086/tcp  open  unknown
1087/tcp  open  unknown
1088/tcp  open  unknown
1089/tcp  open  unknown
1090/tcp  open  unknown
1091/tcp  open  unknown
1092/tcp  open  unknown
1093/tcp  open  unknown
1094/tcp  open  unknown
1095/tcp  open  unknown
1096/tcp  open  unknown
1097/tcp  open  unknown
1098/tcp  open  unknown
1099/tcp  open  unknown
1100/tcp  open  unknown
1102/tcp  open  unknown
1104/tcp  open  unknown
1105/tcp  open  unknown
1106/tcp  open  unknown
1107/tcp  open  unknown
1108/tcp  open  unknown
1110/tcp  open  nfsd-status
1111/tcp  open  unknown
1112/tcp  open  msql
1113/tcp  open  unknown
1114/tcp  open  unknown
1117/tcp  open  unknown
1119/tcp  open  unknown
1121/tcp  open  unknown
1122/tcp  open  unknown
1123/tcp  open  unknown
1124/tcp  open  unknown
1126/tcp  open  unknown
1130/tcp  open  unknown
1131/tcp  open  unknown
1132/tcp  open  unknown
1137/tcp  open  unknown
1138/tcp  open  unknown
1141/tcp  open  unknown
1145/tcp  open  unknown
1147/tcp  open  unknown
1148/tcp  open  unknown
1149/tcp  open  unknown
1151/tcp  open  unknown
1152/tcp  open  unknown
1154/tcp  open  unknown
1163/tcp  open  unknown
1164/tcp  open  unknown
1165/tcp  open  unknown
1166/tcp  open  unknown
1169/tcp  open  unknown
1174/tcp  open  unknown
1175/tcp  open  unknown
1183/tcp  open  unknown
1185/tcp  open  unknown
1186/tcp  open  unknown
1187/tcp  open  unknown
1192/tcp  open  unknown
1198/tcp  open  unknown
1199/tcp  open  unknown
1201/tcp  open  unknown
1213/tcp  open  unknown
1216/tcp  open  unknown
1217/tcp  open  unknown
1218/tcp  open  aeroflight-ads
1233/tcp  open  unknown
1234/tcp  open  hotline
1236/tcp  open  unknown
1244/tcp  open  unknown
1247/tcp  open  unknown
1248/tcp  open  hermes
1259/tcp  open  unknown
1271/tcp  open  unknown
1272/tcp  open  unknown
1277/tcp  open  unknown
1287/tcp  open  unknown
1296/tcp  open  unknown
1300/tcp  open  unknown
1301/tcp  open  unknown
1309/tcp  open  unknown
1310/tcp  open  unknown
1311/tcp  open  rxmon
1322/tcp  open  unknown
1328/tcp  open  unknown
1334/tcp  open  unknown
1352/tcp  open  lotusnotes
1417/tcp  open  timbuktu-srv1
1433/tcp  open  ms-sql-s
1434/tcp  open  ms-sql-m
1443/tcp  open  ies-lm
1455/tcp  open  esl-lm
1461/tcp  open  ibm_wrless_lan
1494/tcp  open  citrix-ica
1500/tcp  open  vlsi-lm
1501/tcp  open  sas-3
1503/tcp  open  imtc-mcs
1521/tcp  open  oracle
1524/tcp  open  ingreslock
1533/tcp  open  virtual-places
1556/tcp  open  unknown
1580/tcp  open  unknown
1583/tcp  open  unknown
1594/tcp  open  unknown
1600/tcp  open  issd
1641/tcp  open  unknown
1658/tcp  open  unknown
1666/tcp  open  netview-aix-6
1687/tcp  open  unknown
1688/tcp  open  unknown
1700/tcp  open  mps-raft
1717/tcp  open  fj-hdnet
1718/tcp  open  unknown
1719/tcp  open  unknown
1720/tcp  open  H.323/Q.931
1721/tcp  open  unknown
1723/tcp  open  pptp
1755/tcp  open  wms
1761/tcp  open  landesk-rc
1782/tcp  open  hp-hcip
1783/tcp  open  unknown
1801/tcp  open  unknown
1805/tcp  open  unknown
1812/tcp  open  unknown
1839/tcp  open  unknown
1840/tcp  open  unknown
1862/tcp  open  unknown
1863/tcp  open  msnp
1864/tcp  open  paradym-31
1875/tcp  open  unknown
1900/tcp  open  upnp
1914/tcp  open  unknown
1935/tcp  open  rtmp
1947/tcp  open  unknown
1971/tcp  open  unknown
1972/tcp  open  unknown
1974/tcp  open  unknown
1984/tcp  open  bigbrother
1998/tcp  open  x25-svc-port
1999/tcp  open  tcp-id-port
2000/tcp  open  cisco-sccp
2001/tcp  open  dc
2002/tcp  open  globe
2003/tcp  open  finger
2004/tcp  open  mailbox
2005/tcp  open  deslogin
2006/tcp  open  invokator
2007/tcp  open  dectalk
2008/tcp  open  conf
2009/tcp  open  news
2010/tcp  open  search
2013/tcp  open  raid-am
2020/tcp  open  xinupageserver
2021/tcp  open  servexec
2022/tcp  open  down
2030/tcp  open  device2
2033/tcp  open  glogger
2034/tcp  open  scoremgr
2035/tcp  open  imsldoc
2038/tcp  open  objectmanager
2040/tcp  open  lam
2041/tcp  open  interbase
2042/tcp  open  isis
2043/tcp  open  isis-bcast
2045/tcp  open  cdfunc
2046/tcp  open  sdfunc
2047/tcp  open  dls
2048/tcp  open  dls-monitor
2049/tcp  open  nfs
2065/tcp  open  dlsrpn
2068/tcp  open  advocentkvm
2099/tcp  open  unknown
2100/tcp  open  unknown
2103/tcp  open  zephyr-clt
2105/tcp  open  eklogin
2106/tcp  open  ekshell
2107/tcp  open  unknown
2111/tcp  open  kx
2119/tcp  open  unknown
2121/tcp  open  ccproxy-ftp
2126/tcp  open  unknown
2135/tcp  open  unknown
2144/tcp  open  unknown
2160/tcp  open  unknown
2161/tcp  open  apc-agent
2170/tcp  open  unknown
2179/tcp  open  unknown
2190/tcp  open  unknown
2191/tcp  open  unknown
2196/tcp  open  unknown
2200/tcp  open  unknown
2222/tcp  open  unknown
2251/tcp  open  unknown
2260/tcp  open  unknown
2288/tcp  open  unknown
2301/tcp  open  compaqdiag
2323/tcp  open  unknown
2366/tcp  open  unknown
2381/tcp  open  unknown
2382/tcp  open  unknown
2383/tcp  open  ms-olap4
2393/tcp  open  unknown
2394/tcp  open  unknown
2399/tcp  open  unknown
2401/tcp  open  cvspserver
2492/tcp  open  unknown
2500/tcp  open  rtsserv
2522/tcp  open  unknown
2525/tcp  open  unknown
2557/tcp  open  unknown
2601/tcp  open  zebra
2602/tcp  open  ripd
2604/tcp  open  ospfd
2605/tcp  open  bgpd
2607/tcp  open  unknown
2608/tcp  open  unknown
2638/tcp  open  sybase
2701/tcp  open  sms-rcinfo
2702/tcp  open  sms-xfer
2710/tcp  open  unknown
2717/tcp  open  unknown
2718/tcp  open  unknown
2725/tcp  open  unknown
2800/tcp  open  unknown
2809/tcp  open  corbaloc
2811/tcp  open  unknown
2869/tcp  open  unknown
2875/tcp  open  unknown
2909/tcp  open  unknown
2910/tcp  open  unknown
2920/tcp  open  unknown
2967/tcp  open  symantec-av
2968/tcp  open  unknown
2998/tcp  open  iss-realsec
3000/tcp  open  ppp
3001/tcp  open  nessus
3003/tcp  open  unknown
3005/tcp  open  deslogin
3006/tcp  open  deslogind
3007/tcp  open  unknown
3011/tcp  open  unknown
3013/tcp  open  unknown
3017/tcp  open  unknown
3030/tcp  open  unknown
3031/tcp  open  unknown
3050/tcp  open  unknown
3052/tcp  open  powerchute
3071/tcp  open  unknown
3077/tcp  open  unknown
3128/tcp  open  squid-http
3168/tcp  open  unknown
3211/tcp  open  unknown
3221/tcp  open  unknown
3260/tcp  open  iscsi
3261/tcp  open  unknown
3268/tcp  open  globalcatLDAP
3269/tcp  open  globalcatLDAPssl
3283/tcp  open  netassistant
3300/tcp  open  unknown
3301/tcp  open  unknown
3306/tcp  open  mysql
3322/tcp  open  unknown
3323/tcp  open  unknown
3324/tcp  open  unknown
3325/tcp  open  unknown
3333/tcp  open  dec-notes
3351/tcp  open  unknown
3367/tcp  open  unknown
3369/tcp  open  unknown
3370/tcp  open  unknown
3371/tcp  open  unknown
3372/tcp  open  msdtc
3389/tcp  open  ms-term-serv
3390/tcp  open  unknown

// snip

Offline

#2 2010-07-31 21:14:31

pyther
Member
Registered: 2008-01-21
Posts: 1,395
Website

Re: nmap says absolutely everything is open?

Not that I can be of to much help, but I suppose you might get some responses if you post the iptable rules that you are trying to use.


Website - Blog - arch-home
Arch User since March 2005

Offline

#3 2010-08-01 12:08:32

user_none
Member
Registered: 2010-03-25
Posts: 10

Re: nmap says absolutely everything is open?

pyther wrote:

Not that I can be of to much help...

It won't help with the nmap issue, but it would be a good idea if he needs help with getting his rules right. The issue TheRealHoboBen is having is nmap is giving him impossible output. He ran the scan on the ip 1.2.3.4 and it's reporting it as active with all ports open.

I cannot reproduce the results TheRealHoboBen is getting.

$ nmap -PN 1.2.3.4

Starting Nmap 5.21 ( [url]http://nmap.org[/url] ) at 2010-08-01 08:05 EDT
Nmap scan report for 1.2.3.4
Host is up (0.054s latency).
All 1000 scanned ports on 1.2.3.4 are filtered

Nmap done: 1 IP address (1 host up) scanned in 20.65 seconds

My guess would be somewhere on your network the ip 1.2.3.4 has been assigned to something.

Offline

Board footer

Powered by FluxBB