Today I tried running a penetration test through monowall, I change the firewall rules so all ports can be accessed.
Within linux i could ping through monowall from the LAN side to the WAN side fine and vice versa. Receiving ping replys correctly.
I tried using nmap to scan the same machine and its appears monowall is blocking this somehow, I have looked into some areas in freebsd which prevents port scanning.
Is there an option to allow port scanning through monowall?
setup:
LanClient --- Monowall --- WanClient
Update: I can run a scan fine from the lanclient targeting the wanclient but when doing the opposite it appears if the port scan is blocked.
Is something preventing port scans being attempted on the wan interface?
Solved: Had to enable advanced outbound nat
|