On Tue, May 28, 2002 at 02:42:51PM -0400, George Georgalis wrote:

> 
> Hi All,
> 
> Why does this nmap scan show these ports filtered, not closed?
> 
> 50420/tcp  filtered    unknown                 
> 50421/tcp  filtered    unknown                 
> 50422/tcp  open        unknown                 
> 50423/tcp  filtered    unknown                 
> 50424/tcp  filtered    unknown                 

"filtered" means: I sent syn and got nothing back.

> 
> Here are the relevant firewall rules:
> 
[snip]
> 
> Also, I was wondering why a connect from the LAN port 50422 (to the
> firewall) does nat to 192.168.0.1:22? It works from the internet....

What is it supposed to do then? If you only want this from the Internet
then do:

iptables -t nat -A PREROUTING -i $EXTIF -p tcp --dport 50422 -j DNAT --to-destination 
192.168.0.1:22

Ramin

> 
> Thanks,
> // George
> 
> 
> -- 
> GEORGE GEORGALIS, System Admin/Architect    cell: 347-451-8229 
> Security Services, Web, Mail,            mailto:[EMAIL PROTECTED] 
> File, Print, DB and DNS Servers.       http://www.galis.org/george 
> 

Reply via email to