How to scan for which ports would be open to another location

Question

I'm just assessing the security of my home server in preparation for opening it up to the internet. I've used nmap from a machine on my local network but I have firewall rules allowing access from the local network so this reveals more than I think will be visible from the internet.

Is there any way to 'spoof' the address nmap is scanning from, so I can see what a potential attacker would see? Any google search for that kind of thing yields a lot of very shady looking websites...

score 2 · Answer 1 · answered Sep 04 '10 at 17:55

2

Try ShieldsUp from Gibson Research. It'll do a simple scan with properly-formed packets, so not everything you might like to scan for. It's been around for years without any fishy reputation that I'm aware of, and the Gibson guy is also quite a character.

answered Sep 04 '10 at 17:55

yukondude

297
4
11

Not bad at all, although the text reports are a bit paranoid. – Cristian Ciupitu Sep 04 '10 at 18:02
It's a very good tool, yes. I'll be using that to be absolutely sure, once I've exposed it to the internet. – Ben Hymers Sep 04 '10 at 18:52

Cristian Ciupitu · Accepted Answer · 2010-09-04T18:06:06.907

2

It's right in the manual:

FIREWALL/IDS EVASION AND SPOOFING:
  -S <IP_Address>: Spoof source address
  -g/--source-port <portnum>: Use given port number
  --spoof-mac <mac address/prefix/vendor name>: Spoof your MAC address

(there other useful options too)

edited Sep 04 '10 at 18:06

answered Sep 04 '10 at 17:56

Cristian Ciupitu

6,226
2
41
55

That's what I wanted. I must have missed that option somehow :s Thanks! – Ben Hymers Sep 04 '10 at 18:51

score 1 · Answer 3 · answered Sep 04 '10 at 18:13

I remember learning Nmap and the decoy/zombie/idle/FTP scan techniques blew my mind with how clever they were. The idle scan has nice pictures to really understand it :D

http://nmap.org/book/man-port-scanning-techniques.html

http://nmap.org/book/man-bypass-firewalls-ids.html

http://nmap.org/book/idlescan.html

How to scan for which ports would be open to another location

3 Answers3