Re: Iptables DROP packets but Nmap show the ports opened !!
Robin-Vinet Mathieu wrote:
> Brian and Henk, i think you make the point.
> Even with iptables loading the inactive ruleset, i've got all ports
> I don't understand why you are speaking of "inetd" ?
> Cause i've got inetd running on the machine...
Well, check /etc/inetd.conf and make sure that things are not not
accidently serviced by inetd. Otherwise when you flush the rules or
when you haven't got a default DROP policy, certain ports will still be
reported as open.
> Did i miss something somewhere ?
Don't know, better check to be sure. Just do a 'grep -v ^# /etc/inetd.conf'
to see what's enabled.
Henk Roose <Henk.Roose@cwi.nl>
CWI - Centrum voor Wiskunde en Informatica
Centre for Mathematics and Computer Science