So how would I do proper test then from my internal network?
Thanks
Kevin
-----Original Message-----
From: Renaud Deraison [mailto:[EMAIL PROTECTED]]
Sent: 17 May 2002 12:16
To: '[EMAIL PROTECTED]'
Subject: Re: Internal or external
On Fri, May 17, 2002 at 11:26:45AM +0100, Kevin Passey wrote:
> Hi,
>
> I am new to nessus - can somebody point me in the right direction.
>
> I have the server running on a machine which is connected directly to the
> internet.
>
> I am using firestarter to generate scripts to protect my machine.
>
> If I look at GRC.com that site tells me that my 137:139 ports are closed -
> however if I scan "myself" nessus tells me 10 ports are open - which is
> correct.
>
> Is nessus picking up internal ports open?
Probably. This kind of traffic (local host to itself) goes through the
"lo" interface, even when specifying the external IP address of your
server, hence the firewall rules of ethX do not apply to it.
-- Renaud
