Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top
nmap -eeth1 [hostname] -p80

Running that command as root uses interface one and fails as expected (interface one is on a subnet blocked by the host.) Using interface 0 succeeds as it should.

However, if I switch to user zabbix then the above command succeeds no matter which valid interface I specify. If I specify a nonexistent interface it fails as expected.

Any idea why the output is different between root and the zabbix user?

share|improve this question
Use -S to "spoof" the address of the second interface does appear to work, however. – Joshua Enfield Jan 27 '11 at 19:07
up vote 1 down vote accepted

This may have something to do with requiring superuser privileges to set new routes. Regular users can't add new routes via route either. The non-privileged zabbix user is likely failing over to using the default routing table, but nmap is not generating a warning about it.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.