Click to See Complete Forum and Search --> : opened ports on routed machines not going with router opened ports


spx2
12-27-2007, 05:31 PM
Hypothesis:

1) nmap on router from one machine in the lan generated by the router:


stef@stefan:~/firepower_repo$ nmap <ip_of_router>

Starting Nmap 4.20 ( http://insecure.org ) at 2007-12-27 13:23 EET
Interesting ports on 89.37.70.170:
Not shown: 1691 closed ports
PORT STATE SERVICE
21/tcp open ftp
80/tcp open http
113/tcp open auth
515/tcp open printer
8080/tcp open http-proxy
9100/tcp open jetdirect


nmap from one machine to the other in the lan under the router :



2) stef@stefan:~/firepower_repo$ nmap 192.168.1.3

Starting Nmap 4.20 ( http://insecure.org ) at 2007-12-27 13:24 EET
Interesting ports on firepower (192.168.1.3):
Not shown: 1691 closed ports
PORT STATE SERVICE
21/tcp open ftp
80/tcp open http
111/tcp open rpcbind
113/tcp open auth
4662/tcp open edonkey
8888/tcp open sun-answerbook



3)viceversa of 2


spx2@firepower:~$ nmap 192.168.1.4

Starting Nmap 4.11 ( http://www.insecure.org/nmap/ ) at 2007-12-28 00:34 EET
Interesting ports on laptop (192.168.1.4):
Not shown: 1674 closed ports
PORT STATE SERVICE
21/tcp open ftp
80/tcp open http
111/tcp open rpcbind
139/tcp open netbios-ssn
445/tcp open microsoft-ds
8000/tcp open http-alt

Nmap finished: 1 IP address (1 host up) scanned in 0.213 seconds


Questions:
1.I figgure all ports opened in 2) and 3) should be also in 1)
however,this is not true,why ?
2.the port 445/tcp microsoft-ds ,what is it ? why is it opened ?

infiniphunk
12-28-2007, 01:02 AM
Hello Romania!

"port 445/tcp microsoft-ds ,what is it ? why is it opened ?"

Are you using Samba?

Look at /etc/services for that protocol. What is Microsoft Naked CIFS?