Penetration Testing: RE: [PEN-TEST] Detecting the presence of a firewall

[railwayclubposse () hushmail com]

You get the same results if the default Checkpoint ports are closed. You 
still need to find one or two open ports, but they don't have to be on the 
firewall itself. The giveaway is in how the headers are rewritten for one-
to-many NAT. 

Frank Knobbe [FKnobbe () KnobbeITS com] wrote:

What criteria is nMap using? What would the result be if a) the
well-known-Checkpoint-ports are closed, and b) the default TTL has
been monkied with? (Not you, Doug)

Regards,
Frank

Free, encrypted, secure Web-based email at www.hushmail.com