Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 6 Jun 2001 00:39:55 -0700
From:      "Alex M" <alex@myzona.net>
To:        <freebsd-questions@freebsd.org>
Subject:   ipfw and nmap
Message-ID:  <002f01c0ee5b$e521b500$ea31fea9@parkson>

next in thread | raw e-mail | index | archive | help
Hello people,

I've just statically enabled ipfirewall in kernel with default to accept
policy, i use a custom ruleset:

voyager# ipfw show
00100    18    1052 allow ip from any to any via lo0
00100    31    1496 deny tcp from any to any 111,587,3306
00101     0       0 deny udp from any to any 111,587,3306
00200     0       0 deny ip from any to 127.0.0.0/8
65535 21790 1148822 allow ip from any to any

Now, when I try to run nmap from this machine with a basic -sT options, i've
got a simple error:

Strange error from connect (13):Permission denied

It is understable due to fully blocked some ports.
But, when i try to perform a SYN scan (-sS), this error occurs:

sendto in send_tcp_raw: sendto(3, packet, 40, 0, 195.209.226.151, 16) =>
Permission denied
Sleeping 15 seconds then retrying
sendto in send_tcp_raw: sendto(3, packet, 40, 0, 195.209.226.151, 16) =>
Permission denied
Sleeping 60 seconds then retrying

and so on... scanning will not be performed...

Anyone can give me any hints on this?  Any help would be appreciated.

Thanks.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?002f01c0ee5b$e521b500$ea31fea9>