CentOS 8 and Nmap.

[hack3rcon]

Hello,
I scanned the CentOS 8 by Nmap:

Code: Select all

# nmap -sS -sU -T4 -A -v -PE -PP -PS80,443 -PA3389 -PU40125 -PY -g 53 --script "default or (discovery and safe)" IP

The result is :

nmappp.png (108.84 KiB) Viewed 2881 times

Is it not odd?

Thank you.

[TrevorH]

You appear to either have no firewall active or you ran this scan from the same machine that you were scanning (which bypasses the firewall entirely).

[hack3rcon]

You appear to either have no firewall active or you ran this scan from the same machine that you were scanning (which bypasses the firewall entirely).

Firewall service? The firewalld enabled.

[TrevorH]

And where did you run it from?

[hack3rcon]

And where did you run it from?

The server is a local with a local and a public IP.
I scanned the public IP.

[TrevorH]

You still didn't answer the question. From where did you scan the public ip?

[hack3rcon]

I scanned it from the local network.
When I scanned its public IP then my packets must going to it from the outside network!!!

[jlehtone]

When I scanned its public IP then my packets must going to it from the outside network!!!

Why do you think so?

Do you have two machines that both have two interface (one local, one public)? Is one the server and another a router?
In that case your scanner would send packets to the router and the router would forward them from router's public to server's public.

If not, then your assumption does not hold.

[hack3rcon]

My PC is in a difference VLAN and my server have special NICs for internal and external networks. I guess it is because of Firewalld. It allowing all packets.

Code: Select all

$ sudo firewall-cmd --list-all
public (active)
  target: default
  icmp-block-inversion: no
  interfaces: ens192
  sources: 
  services: ssh
  ports: 80/tcp 443/tcp
  protocols: 
  masquerade: no
  forward-ports: 
  source-ports: 
  icmp-blocks: 
  rich rules: 

[jlehtone]

That shows only the default zone's status.

[--permanent] [--zone=zone] --list-all
List everything added for or enabled in zone. If zone is omitted, default zone will be used.

That zone (public) does not seem to have any custom icmp-block rules. Is the ens192 even on the "external"?

difference VLAN

In other words you have at least three networks?
* internal
* external
* difference
How does the "difference" connect to the "external"?