Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
nmap -eeth1 [hostname] -p80

Running that command as root uses interface one and fails as expected (interface one is on a subnet blocked by the host.) Using interface 0 succeeds as it should.

However, if I switch to user zabbix then the above command succeeds no matter which valid interface I specify. If I specify a nonexistent interface it fails as expected.

Any idea why the output is different between root and the zabbix user?

share|improve this question
    
Use -S to "spoof" the address of the second interface does appear to work, however. –  Joshua Enfield Jan 27 '11 at 19:07
add comment

1 Answer

up vote 1 down vote accepted

This may have something to do with requiring superuser privileges to set new routes. Regular users can't add new routes via route either. The non-privileged zabbix user is likely failing over to using the default routing table, but nmap is not generating a warning about it.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.