Re: Stealthing Port 113

On Thu, Aug 14, 2003 at 07:25:33PM +0100, Philip B Cook wrote:

I have checked using www.grc.com which ports I have open to the outside

It is a usefull tool, thanks for that hint.

world and find that all ports up to 1056 are in stealth mode EXCEPT port 113 (IDENT) which is reported as closed. So my machine can be detected on this port although it will not respond.

Just a remark: If you use "reject-with tcp-reset" they will list the port as CLOSED. If you use "reject-with icmp-port-unreachable" it is listed as STEALTH. I use the icmp variant to address the mail delay problem. Therefore I was surprised that all ports were listed as STEALTH. -- Stefan Tichy