Maybe bug, with -sP und ASA sending RST for denied networks

  Salve,

  maybe old stuff, just happened to me and can't find something in the docs
or elsewhere. When dong the -sP with an ASA in between you and the target,
the tcp-syn on port 80 will be answered by a RST from the ASA, thereby making
nmap think the host is responding and alive. Of course the results of such
a scan are basically useless then.

  Would it be possible to ignore RST in such a szenario? Or have a command
line switch to trigger this?

  Cheers

-- 
  Pluto   -   SysAdmin of Hades
  Free information! Freedom through knowledge. Wisdom for all!! =:-)
  PGP://0xB4BBB4A9?524CB500A8F3EAA2&6A3E5272F9072A17  ICQ: 286852401
_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev
Archived at http://SecLists.Org