RE: Interesting challenge

["Hasnain Atique" <hatique () hasnains com>]

Sanjay,

As others have suggested, have you had any luck with LFT tools such as
hping? If there's something else between the edge router and the target
filtering the packets, hping should show it up.

-- HA

-----Original Message-----
From: Sanjay K. Patel [mailto:sanjay.patel () rexwire com] 
Sent: Saturday, January 31, 2004 5:56 AM
To: 'Clement Dupuis'
Cc: pen-test () securityfocus com
Subject: RE: Interesting challenge


 almost everyone who replied pointed towards icmp. We have tried running
the test with icmp disabled. We still do not get a reply on those ports.

-SKP

-----Original Message-----
From: Clement Dupuis [mailto:cdupuis () cccure org] 
Sent: Friday, January 30, 2004 3:06 PM
To: 'Sanjay K. Patel'
Subject: RE: Interesting challenge

Have you carefully looked at some of the buried down setting under your
scanners.  It might simply be that it is expecting a reply from a ping
request before doing the scanning.  

Clement


> > -----Original Message-----
> > From: Sanjay K. Patel [mailto:sanjay.patel () rexwire com]
> > Sent: Friday, January 30, 2004 11:43 AM
> > To: pen-test () securityfocus com
> > Subject: Interesting challenge
> >
> >
> >
> >
> > We are doing a pen test for a client and have run into a interesting
> > situation. The client has a server running IIS and Exchange we can
get to
> > it
> > through a browser but when we try to run Nessus or Eeye Retina
against
> > it,
> > neither product can find the server. The client is not running any
IDS
> > system has a simple firewall. A port scan revels no open port though
port
> > 80
> > is open since the server is serving pages.
> >
> >
> > SKP
------------------------------------------------------------------------
-
> > --
------------------------------------------------------------------------
-
> > ---


------------------------------------------------------------------------
---
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
----------------------------------------------------------------------------