On 2020-02-17 07:27, Samuel Sieb wrote:
I've never seen someone firewall localhost, not sure if that's even possible. So
any port that isn't open will be closed, not filtered.
Yes, but I was actually referring to when he stated that...
From Client:
nmap -v -n -P0 -p5900-5906 euripide
Warning: The -P0 option is deprecated. Please use -Pn Starting Nmap 7.70 (
https://nmap.org ) at 2020-02-16 10:09 CET
Initiating Connect Scan at 10:09
Scanning euripide.u-bourgogne.fr (193.52.235.60) [7 ports]
So, my assumption was that he was testing from a host on the internet.
If I probe his system "euripide " I get
PORT STATE SERVICE
22/tcp open ssh
5900/tcp closed vnc
5901/tcp closed vnc-1
5902/tcp closed vnc-2
5903/tcp closed vnc-3
5904/tcp closed unknown
5905/tcp closed unknown
5906/tcp closed unknown
But if I probe another Linux system directly connected to the Internet I get
PORT STATE SERVICE
22/tcp open ssh
5900/tcp filtered vnc
5901/tcp filtered vnc-1
5902/tcp filtered vnc-2
5903/tcp filtered vnc-3
5904/tcp filtered unknown
5905/tcp filtered unknown
5906/tcp filtered unknown
This lead me to the conclusion that the VNC ports weren't opened at the Internet
access point.
And that something needed doing to fix/circumvent it.
Anyway, he seems to have it working now running vncviewer over an ssh tunnel.
FWIW, nmap can't accurately detect the what euripide is and reports...
Device type: general purpose|PBX
Running (JUST GUESSING): Linux 3.X|4.X|2.6.X (88%), Vodavi embedded (86%)
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4 cpe:/h:vodavi:xts-ip
cpe:/o:linux:linux_kernel:2.6
So, it sounds like an ISP supplied device. Whereas the Linux system probed above shows
as
Device type: general purpose
Running: Linux 3.X|4.X
OS CPE: cpe:/o:linux:linux_kernel:3 cpe:/o:linux:linux_kernel:4
OS details: Linux 3.10 - 4.11, Linux 3.2 - 4.9
--
The key to getting good answers is to ask good questions.