weird networking problem...

[mcseguy9]

okay, i have an old box with nt 4 server on it. everything seems to be running fine on it. i have another box with win2k pro on it. everything seems to be running fine on it. i have 2 nic's in the w2k pro box. 1 for connecting to this nt 4 server and one for connecting to my work LAN. the nic that connects to the nt 4 server has a static ip (in the 10.x.x.x range) and the nic that connects to my work LAN is in a totally different range (176.x.x.x). the nt 4 server and my w2k pro box are connected via a cross over cable. all is fine with the networking on my box using the nic connected to my work LAN. there is no ip forwarding turned on so the 2 nic's should not be forwarding packets to each other.

all seems fine with the networking on my box using the 2nd nic that connects to the nt 4 server. i can ping it's ip address. i haven't tested to see if i can map drives or get to any shares on the nt 4 server. what's weird is that i tried to port scan my nt 4 server from my w2k pro machine and it seems to scan endlessly and never finds an open port. there is no firewall or AV running on the nt 4 server. it is a basic install with IIS installed and running (ftp, www, gopher), that's it. any ideas on what is causing the port scan to come up blank? could it have anything to do with how i have the 2 boxes connected, via cross over cable instead of through a hub? let me know what you think. thx.

[BipolarBill]

Are you sure you're scanning from the correct NIC? Are you sure of the NT4 IP? Have you tried initiating some activity from the NT4 box during the scan?

[mcseguy9]

that's a great question. it's really the only one that i could think might be causing the problem. the question is, how do i tell my windows based port scanner to use the right nic? if you know of a windows based port scanner that has this capability i would like to know what it is.

[BipolarBill]

Try unplugging the other cable or disabling the connection during the scan.

[mcseguy9]

i'll disable the lan connection and then try the scan. i'll let you know what happens shortly.

[mcseguy9]

that was interesting. i disabled the lan nic and scanned the nt server using my port scanner of choice, super scanner. it still didn't work. if i told it to scan all of the ports in a specific list it wouldn't find anything. if i told it to scan every port from 1 to 65000 it found tons, but no truly relevant ports that i would think would be open on the machine...nothing like 139, 21, 23, 80, etc.

i then scanned it with languard network scanner and it found some good info but did not find the ftp or www services running. i've never used it before so i'm assuming it will find them by default if they're open. correct me if i'm wrong.

i'm going to try nmapnt and see what it gives me... any additional help/ideas/info would be great...

[BipolarBill]

Try connecting to it with a browser. There's an old saying..."If it works, don't fix it." I like that saying.

BTW...you have great security there! :p