[Tyler McAdams]

...I found the following ports to be opened:

Starting nmap V. 3.00 ( www.insecure.org/nmap )
Warning: OS detection will be MUCH less reliable because we did not find at least 1 open and 1 closed TCP port
Interesting ports on
(The 1589 ports scanned but not shown below are in state: closed)
Port State Service
135/tcp filtered loc-srv
136/tcp filtered profile
137/tcp filtered netbios-ns
138/tcp filtered netbios-dgm
139/tcp filtered netbios-ssn
445/tcp filtered microsoft-ds
593/tcp filtered http-rpc-epmap
4444/tcp filtered krb524
6666/tcp filtered irc-serv
6667/tcp filtered irc
6668/tcp filtered irc
7000/tcp filtered afs3-fileserver
No exact OS matches for host (test conditions non-ideal).
TCP/IP fingerprint:
SInfo(V=3.00%P=i686-pc-windows-windows%D=11/26%Time=3FC54C64%O=-1%C=1)
T5(Resp=
Y%DF=N%W=0%ACK=S++%Flags=AR%Ops=)
T6(Resp=Y%DF=N%W=C00%ACK=S%Flags=AR%Ops=WNMETL)
T7(Resp=Y%DF=N%W=C00%ACK=S++%Flags=AR%Ops=WNMETL)
PU(Resp=N)
Nmap run completed -- 1 IP address (1 host up) scanned in 32 sec


Why are these ports open? I know that I did not open them!!!

[Scotttheking]

Nothing to worry about.
Filtered doesn't mean open.

nmap says I have 1591 filtered ports.

[Tyler McAdams]

Originally posted by Scotttheking:
Nothing to worry about.
Filtered doesn't mean open.

nmap says I have 1591 filtered ports.

Thanks! So the airport router actually has stateful packet inspection... or am I asking too much?

[kampl]

In my experience with nmap, when ports are expicitly denied on a router you will see them as "filtered" as opposed to nothing (not open, no reply).

SPI firewalls tend to be a bit more intelligent and drop the traffic, not yielding any information to the host probing.

What are you looking for?