Untangle Forums - View Single Post

dmorris · 07-16-2007, 09:52 PM

This is the attack blocker (untangle-vm shield) kicking in.
Once the scanning computer gets a bad reputation it starts requiring the scanner to ack the first syn before letting it connect to prevent syn floods.
The effect makes ports appear open that are not.

To see the real open port list - turn the scan speed down to very slow.

http://bugzilla.untangle.com/show_bug.cgi?id=3026

07-16-2007, 09:52 PM	#3 (permalink)
dmorris Untangle Junkie Join Date: Nov 2006 Location: San Mateo, CA URLs submitted: 10 Posts: 10,599	This is the attack blocker (untangle-vm shield) kicking in. Once the scanning computer gets a bad reputation it starts requiring the scanner to ack the first syn before letting it connect to prevent syn floods. The effect makes ports appear open that are not. To see the real open port list - turn the scan speed down to very slow. http://bugzilla.untangle.com/show_bug.cgi?id=3026 __________________ Attention: Support and help on the Untangle Forums is provided by volunteers and community members like yourself. If you need Untangle support please call or email support@untangle.com