> Usually if a connection succeeds the firewall isn't stopping it > at all. How is nmap figuring out the service type? I assume by > making a connection and probing it.
Nothing so elegant. It uses /etc/services. Most of its scans never finish opening the connection. (This is why it will normally mislabel RPC services; if in doubt, use rpcinfo.) joelh -- Joel Ray Holveck - jo...@gnu.org Fourth law of programming: Anything that can go wrong wi sendmail: segmentation violation - core dumped To Unsubscribe: send mail to majord...@freebsd.org with "unsubscribe freebsd-hackers" in the body of the message