131 reputation
5
bio website
location
age
visits member for 2 years
seen Apr 24 at 9:30

Feb
25
awarded  Scholar
Feb
25
awarded  Supporter
Feb
25
accepted nmap lists host as up despite being black listed
Feb
13
comment nmap lists host as up despite being black listed
Yes, I understand this now, thanks.
Feb
13
comment nmap lists host as up despite being black listed
I am testing an external interface on a local network before it is placed on a PPPoE connection. The idea is that I wan't the machine to "disappear" as much as possible when it detects a probe. This is working at Layer 3 as you point out, but I merely didn't understand what tactics nmap was using to "discover" the host.
Feb
13
awarded  Student
Feb
12
comment nmap lists host as up despite being black listed
It seems to show that both packets on the port 80 scan hit the BLACKLIST rule and were dropped. So I don't understand how nmap is able to determine the host is up.
Feb
12
revised nmap lists host as up despite being black listed
added 2891 characters in body
Feb
12
comment nmap lists host as up despite being black listed
I have added the trace for the first packet.
Feb
12
revised nmap lists host as up despite being black listed
added 1547 characters in body
Feb
12
comment nmap lists host as up despite being black listed
I have added -A INPUT -i {EXT_IFACE} -m limit --limit 1/second -j TRACE. I will see what happens.
Feb
12
awarded  Editor
Feb
12
comment nmap lists host as up despite being black listed
I have updated with the relevant rules. These are the first rules to be executed and the last once my attacking machine is blacklisted, since the blacklist rules are second only to E,R connections.
Feb
12
revised nmap lists host as up despite being black listed
added 1569 characters in body
Feb
12
comment nmap lists host as up despite being black listed
LOL, are you really sure you want to see ALL of my rules? I will just show you the path to the DROP instead.
Feb
12
asked nmap lists host as up despite being black listed
Oct
24
awarded  Teacher
Oct
24
answered What's the best way to check if a volume is mounted in a Bash script?