[ale] nmap me

[John Wells]

odd...I shouldn't have anything visible externally....

here's my netstat:

$ netstat -pa

Active UNIX domain sockets (servers and established)
Proto RefCnt Flags       Type       State        
I-Node PID/Program name    Path
unix  2      [ ACC ]     STREAM     LISTENING     1007
  796/xfs             /tmp/.font-unix/fs7100
unix  12     [ ]         DGRAM                    558 
  355/syslogd         /dev/log
unix  2      [ ACC ]     STREAM     LISTENING     960 
  748/gpm             /dev/gpmctl
unix  2      [ ]         DGRAM                    3098
  2549/pppoe
unix  2      [ ]         DGRAM                    3081
  2545/pppd
unix  2      [ ]         DGRAM                    2796
  2285/xinetd
unix  2      [ ]         DGRAM                    1010
  796/xfs
unix  2      [ ]         DGRAM                    972 
  760/crond
unix  2      [ ]         DGRAM                    941 
  735/sendmail: accep
unix  2      [ ]         DGRAM                    753 
  560/automount
unix  2      [ ]         DGRAM                    695 
  476/apmd
unix  2      [ ]         DGRAM                    641 
  418/cardmgr
unix  2      [ ]         DGRAM                    567 
  360/klogd
unix  2      [ ]         STREAM     CONNECTED     343 
  1/init [3]

Nothing on the firewall running those ports.  Is it
actually tracking through my IP_MASQ?  I do run
NETBEUI on a few Win machines internally, but no samba
going on any of my linux machines.  

And what the hell is fics?

Thanks for the help,

John


--- Christopher Bergeron <christopher at bergeron.com>
wrote:
> consider yourself "mapped":
> 
> [root at linux root]# nmap 208.61.160.204
> 
> Starting nmap V. 2.54BETA22 ( www.insecure.org/nmap/
> )
> Interesting ports on
> adsl-61-160-204.atl.bellsouth.net (208.61.160.204):
> (The 1538 ports scanned but not shown below are in
> state: closed)
> Port       State       Service
> 137/tcp    filtered    netbios-ns
> 138/tcp    filtered    netbios-dgm
> 139/tcp    filtered    netbios-ssn
> 5000/tcp   filtered    fics
> 
> 
> Nmap run completed -- 1 IP address (1 host up)
> scanned in 12 seconds
> 
> 
> 
> 
> -----Original Message-----
> From: John Wells [mailto:jbwellsiv at yahoo.com]
> Sent: Tuesday, December 18, 2001 8:45 PM
> To: ale at ale.org
> Subject: [ale] nmap me
> 
> 
> If anyone's alive out there, could you please nmap
> my
> machine and see if you see anything interesting? 
> I'm
> testing out my iptables script and want to see if
> it's
> working ok.
> 
> 208.61.160.204
> 
> Thanks,
> John
> 
> __________________________________________________
> Do You Yahoo!?
> Check out Yahoo! Shopping and Yahoo! Auctions for
> all of
> your unique holiday gifts! Buy at
> http://shopping.yahoo.com
> or bid at http://auctions.yahoo.com
> 
> ---
> This message has been sent through the ALE general
> discussion list.
> See http://www.ale.org/mailing-lists.shtml for more
> info. Problems should be
> sent to listmaster at ale dot org.
> 
> 
> 
> ---
> This message has been sent through the ALE general
> discussion list.
> See http://www.ale.org/mailing-lists.shtml for more
> info. Problems should be 
> sent to listmaster at ale dot org.
> 


__________________________________________________
Do You Yahoo!?
Check out Yahoo! Shopping and Yahoo! Auctions for all of
your unique holiday gifts! Buy at http://shopping.yahoo.com
or bid at http://auctions.yahoo.com

---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.