Re: Port 9050 Question
Daniel Miller <[email protected]> Thu, 1 Nov 2018 22:25:18 -0500
| Newsgroups | gmane.comp.security.nmap.devel |
|---|---|
| Message-ID | <CABmvJnPcSmDYS_zZBL6okCb6vd16w-00iBVY_jaGg=2YaOOOLw@mail.gmail.com> |
Jarrod, "filtered" means that something is blocking communication on that port. It does not indicate that anything is using that port. On the contrary, if the port is filtered, it is less likely that it is being used by anything. Most likely, the client's network or your own network is configured to block communications on port 9050, possibly in an attempt to prevent communication over SOCKS proxies. Dan On Thu, Nov 1, 2018 at 12:41 AM Jarrod Fodemski <[email protected]> wrote: > Hello, > > I’ve doing an audit for a client and my scan is returning port 9050 > (tor-socks) as filtered. I don’t want to raise an alarm unnecessarily that > one of their IT staff is using Tor for anything on the company network, but > I can’t make any sense of this. I was wondering if anyone else has seen > this (I could find nothing in Google searches) or if you might have any > ideas what would cause this? > > Any feedback is greatly appreciated. > > Thanks, > > Jarrod > > > Jarrod Fodemski > Systems Engineer > E-mail: > [email protected] > Phone: > (219)680-9884 > If > you are happy with our services > refer > a friend! > This > message is confidential. It may also be privileged or otherwise protected > by work product immunity or other legal rules. If you have received it by > mistake, please let us know by e-mail reply and delete it from your > system; you may not copy this message or disclose its contents to anyone. > Please send us by fax any message containing deadlines as incoming e-mails > are not screened for response deadlines. The integrity and security of > this message cannot be guaranteed on the > Internet. > _______________________________________________ > Sent through the dev mailing list > https://nmap.org/mailman/listinfo/dev > Archived at http://seclists.org/nmap-dev/ _______________________________________________ Sent through the dev mailing list https://nmap.org/mailman/listinfo/dev Archived at http://seclists.org/nmap-dev/