Printable View
When I scan any host on the internet its showing all ports that it scans in the open state? But i can scan a host on my personel network and it works just fine(showing only the ports that should be open)? Has anybody had this problem before? could it be my ISP's problem? The funny thing is, no matter which host i scan ((across the internet)) its shows ALL the ports and services open and running.
Well i guess you should just stick to scanning: "hosts on your personal network"Quote:
Originally posted here by kopter
When I scan any host on the internet its showing all ports that it scans in the open state? But i can scan a host on my personel network and it works just fine(showing only the ports that should be open)? Has anybody had this problem before? could it be my ISP's problem? The funny thing is, no matter which host i scan ((across the internet)) its shows ALL the ports and services open and running.
instead of scanning any host on the internet.
It's a known fact that NMAP does not play nice with SOHO routers. If you're scanning from behind one, this may explain your issue. Be happy that your router hasn't locked up as this is another side effect of attempting to scan internet hosts from behind a SOHO router.
Why does this happen? Think about the NAT capabilities of your lil router and the answer will be very apparent.
--TH13
im sorry i didnt specify YOUNGNOBODY Im scanning my own network across the internet for vulnerabilities...... pen-testing if you will.
Horse13....Yes i have had my router lock up on me quite a few times and i culd never figure out why! thank you i am much obliged. now im on to google to understand NAT as well as SOHO routers
kopter: The SOHO routers have a very limited amount of memory and processing power. It is very difficult for the routers to keep up with the nat translations.
You'd be far better off with an ipcop box on some older hardware. Or, unplug your router and plug your machine directly into the connection. (if you have that option).
If you've ever had a couple of torrents going, or any p2p for that matter... the soho routers lock up big time. Try to implement some sort of ACLs or QoS on them and it just gets worse... they have more work to do with fewer resources.
I've had big issues in the past with linksys, netgear, etc. All the small office home office routers seem to have this issue. I've use a better quality router for a while now. If you have the extra cash, look at picking yourself up a better quality router. (Cisco 800 series are my favorite for SOHO.)
If you don't have that kind of $ to dish out, dig up an older PII or PIII and throw 256megs of memory in it, two NICs and configure IPCOP. It'll run circles around any linksys or netgear "consumer" or "SOHO" "router".
Thanks everybody!! I went ahead and changed out routers, cloned the MAC my ISP had and my scans are going great find now! My next move is to put IPcop on this old PII ive got and see how that works
On another note. Is there any way to disable NAT trasnlations on a router?
The router i was using was a wrt54g so would it help to get some GPL firmware and use it? Or is it all in the hardware?
kopter: You can't really disable NAT unless you have multiple IPs assigned to you by your ISP. Read up on what NAT is and how it works. After you know how it works, you'll understand why you can't turn it off while sharing one public ip with all the computers on your network.
I have a wrt54g with the sveasoft firmware on it. You can download it for free @ http://wrt54g.thermoman.de/ I think you want freeman 1.0.4 .That firmware gives you a lot more features but it does nothing for the physical hardware. It is still very easy to overload the wrt54g with the GPL'd firmware. (Though, sveasoft isn't 100% GPL anymore, I don't think.)
I have a Cisco 831 as my border device. It has plenty of resources for what you're trying to do. But, it is more costly than an IPCOP box. I only use the linksys for wifi access on a second subnet for my laptops and PDA's.