On Tue, 05 March 2002, "Simon Bolduc" wrote > >Keep in mind that if grc's scanner can see a stealth'd port, that means > >more advanced tools can see it as well. If a port is closed, then all > >that means is that it is closed and will NOT respond to requests on >that > >port. > > That isn't correct. A closed port responds saying that the port is closed > (as in no services are being offered on that port, and it isn't expecting > any data). A stealth port doesn't respond at all and is indicative of a > fully firewalled computer, or that there isn't a host at that address at > all. Thus GRC's scanner can't actually see a stealthed port - the results > would be the same if you turned off your computer. > > S
So I got the closed part right, but I thought I recalled from some other lists last year that there were some scanners that could 'see' stealthed ports. >From the thread, it was a slower porccess the stealth ports delay would cause issue's. Hmmm.... I will have to do some searching next week. No time this week. In the long run, as long as you have a good firewall, I don't know that stealthing your IP address really does as much good as some folks believe. But Most of the time I was set up, I was also offering services so stealthing ports wouldn't do me much good as I definitly had open ports. -sp _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
