From owner-freebsd-stable@FreeBSD.ORG  Mon Sep 22 13:12:14 2003
Return-Path: <owner-freebsd-stable@FreeBSD.ORG>
Delivered-To: freebsd-stable@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 0565416A4B3
	for <freebsd-stable@freebsd.org>;
	Mon, 22 Sep 2003 13:12:14 -0700 (PDT)
Received: from hotmail.com (sea1-f6.sea1.hotmail.com [207.68.163.6])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 6720D43F93
	for <freebsd-stable@freebsd.org>;
	Mon, 22 Sep 2003 13:12:13 -0700 (PDT)
	(envelope-from ignorabimus2002@hotmail.com)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
	 Mon, 22 Sep 2003 13:12:13 -0700
Received: from 213.115.16.68 by sea1fd.sea1.hotmail.msn.com with HTTP;
	Mon, 22 Sep 2003 20:12:12 GMT
X-Originating-IP: [213.115.16.68]
X-Originating-Email: [ignorabimus2002@hotmail.com]
From: "Toan Hoang" <ignorabimus2002@hotmail.com>
To: freebsd-stable@freebsd.org
Date: Mon, 22 Sep 2003 22:12:12 +0200
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
Message-ID: <Sea1-F6n3c6xpwW35BX00000b6a@hotmail.com>
X-OriginalArrivalTime: 22 Sep 2003 20:12:13.0173 (UTC)
	FILETIME=[CF92B250:01C38145]
Subject: IPFilter and Nmap
X-BeenThere: freebsd-stable@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Production branch of FreeBSD source code
	<freebsd-stable.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-stable>
List-Post: <mailto:freebsd-stable@freebsd.org>
List-Help: <mailto:freebsd-stable-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-stable>,
	<mailto:freebsd-stable-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 22 Sep 2003 20:12:14 -0000

Greetings list!

I'vs got a strange problem with my new FreeBSD box..

I've just installed IPFilter and recompiled the kernel to 4.9PRERELEASE.. (I 
compiled with options: IPFILTER, IPFILTER_LOG, IPFILTER_BLOCK_DEFAULT 
(IPFILTER_DEFAULT_BLOCK??)

My problem is when I'm scanning the FreeBSD box with nmap (from a WinXP 
machine), I get rapports about ports that's open:

(The 1647 ports scanned but not shown below are in state: filtered)
PORT     STATE SERVICE
25/tcp   open  smtp
80/tcp   open  http
81/tcp   open  hosts2-ns
82/tcp   open  xfer
83/tcp   open  mit-ml-dev
110/tcp  open  pop-3
119/tcp  open  nntp
1080/tcp open  socks
5190/tcp open  aol
8080/tcp open  http-proxy

My /etv/ipf.rules looks like this:

block in all
pass in quick on lo0 all
pass out quick on lo0 all

Here's my pkg_info too:
apache+mod_ssl-1.3.28+2.8.15_1
bash-2.05b.007
cvsup-without-gui-16.1h
expat-1.95.6_1
gettext-0.12.1
gmake-3.80_1
gnuls-4.1
libgnugetopt-1.2
libiconv-1.9.1_1
libtool-1.3.5_1
lynx-ssl-2.8.4.1d
mm-1.3.0
nmap-3.30
noip-1.6
pcre-4.3
pkgconfig-0.15.0
portupgrade-20030723
postfix-2.0.15,1
postgresql-7.3.4_1
proftpd-1.2.8
ruby-1.6.8.2003.04.19
ruby-bdb1-0.2.1
ruby-rdoc-0.0.0.b2
ruby-shim-ruby18-1.8.0.p2.2003.04.19_1
vim-lite-6.2.72

regards
Toan

_________________________________________________________________
Last ned nye MSN Messenger 6.0 gratis http://www.msn.no/computing/messenger 
- Den raskeste veien mellom deg og dine venner