Router Deny tcp - but port are filtered

[mauric]

Hello

i'am Beginner and not shure if understanding the "Deny" correct.

Please i Setup now my Router and i was thinking that if pushing this Setup

my prefered ports are now "closed".

"ip access-list extended blocks-2002-4002-ports
 deny   tcp any any eq 2002
 deny   tcp any any eq 4002
 permit ip any any"

if checking this Setup with nmap i see that this are "filtered"

     "2002/tcp filtered globe
     4002/tcp filtered mlchat-proxy"

but what are the different from "Closed" to "Filtered", and why this port are now not stil close?

thanks for your Update....

regards

Mauri

[Georg Pauwen]

Hello,

the access list keeps NMAP from reaching the port, so NMAP cannnot dettermine whether the port is open or closed...hence the state 'filtered'.

'Closed' means the NMAP probes can reach the port, but no application is associated with the port.

Check the link below for an explanation of the six different port states:

https://nmap.org/book/man-port-scanning-basics.html