RE: [PEN-TEST] Detecting the presence of a firewall

You get the same results if the default Checkpoint ports are closed. You
still need to find one or two open ports, but they don't have to be on the
firewall itself. The giveaway is in how the headers are rewritten for one-
to-many NAT.

Frank Knobbe [FKnobbe_at_KnobbeITS.com] wrote:

What criteria is nMap using? What would the result be if a) the
well-known-Checkpoint-ports are closed, and b) the default TTL has
been monkied with? (Not you, Doug)

Regards,
Frank

Free, encrypted, secure Web-based email at www.hushmail.com

IMPORTANT NOTICE: If you are not using HushMail, this message could have been read easily by the many people who have access to your open personal email messages.
Get your FREE, totally secure email address at http://www.hushmail.com.
Received on May 15 2001