[NTLUG:Discuss] Allocating Port addresses.

[MadHat]

On Mar 22, 2004, at 6:22 AM, terry wrote:
> Speaking of being blocked, if that's the case, will nmap report that 
> the  port is "filtered"?  In other words, what does nmap mean when it 
> says "filtered"?
>

depends on the protocol, but I will assume you mean TCP.  Looking at a 
SYN scan, for open to be the state a SYN/ACK would be returned for our 
SYN sent. closed would be reported by nmap when a RST (reset) packet 
would be returned and filtered would show up as the state when either 
nothing was returned, and and we assume that a firewall dropped the 
request, or an ICMP port unreachable or admin denied message was 
returned.