[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: opening ports



Mike McCarty:
> Andrei Popescu wrote:
> 
>> firewall are sometimes called "filtered" (by nmap) or "stealth" (by
>> some Windows firewalls).
> 
> A stealthed port appears not to exist to the external world,
> but that does not mean that there is no service "listening"
> on it.

"Stealthed" almost always means that there is a service listening on
that port, but traffic to it is being filtered somehow. However,
"pretending not to exist" is not possible for a computer with a public
IP address anyway. Even if you drop *every* incoming packet, an attacker
still knows that you are there from the absence of an ICMP message from
your ISP's router that there is no computer with your IP address.

> Also, the term "stealth" has been around longer than Windows
> firewalls, I do believe.

Don't know. It is a marketing term, that's for sure.

J.
-- 
There is no justice in road accidents.
[Agree]   [Disagree]
                 <http://www.slowlydownward.com/NODATA/data_enter2.html>

Attachment: signature.asc
Description: Digital signature


Reply to: