Windows XP SP2 OS detection with Firewall ON

["Baumgart, Alexander (K-GOT-1)" <alexander.baumgart () volkswagen de>]

Hello,

i have a little bit trouble with OS detection and Windows XP SP2 with
enabled firewall. Nmap guess my OS as IBM AIX. I could trackdown the problem
so far i know why. The reason i didnt get a ICMP port unreachable if the
firewall is enabled and soe no matching PU fingerprint entry. I found a
setting under Advanced/ICMP that should enable ICMP unreachable telegramms,
but it didnt. I think the firewall is blocking all, beside the per exclusion
defined ports and protocols. I had  to enable UDP for the closed port nmap
used for OS detection. Why nmap use a TCP closed port for UDP ? Any idea how
i could fix the windows xp firewall problem ? (k i know it isnt the right
grp, but perhaps someone else has a similar problem) 

Regard Baumgart


_______________________________________________
Sent through the nmap-dev mailing list
http://cgi.insecure.org/mailman/listinfo/nmap-dev