VirtualBox 来宾响应 ping 但所有端口在 nmap 中关闭

Question

我想在 vm 上设置一个用于开发目的的测试数据库，但我无法通过网络连接到服务器。

我在 Virtualbox 4.2.4 的 12.04 主机上安装了 Ubuntu 12.04vm 设置为 - 桥接网络模式 - 混杂允许所有

当我尝试从任何网络客户端 ping 虚拟来宾时，我得到了预期的结果。

PING 192.168.1.209 (192.168.1.209) 56(84) bytes of data.
64 bytes from 192.168.1.209: icmp_req=1 ttl=64 time=0.427 ms
...

vm里面上网是正常的

但是当我 nmap 它时，我什么也没得到！

jeremy@bangkok:~$ nmap -sV -p 1-65535 192.168.1.209
Starting Nmap 5.21 ( http://nmap.org ) at 2012-11-15 18:39 CST
Nmap scan report for jeremy (192.168.1.209)
Host is up (0.0032s latency).
All 65535 scanned ports on jeremy (192.168.1.209) are closed
Service detection performed. Please report any incorrect results at http://nmap.org/submit/
Nmap done: 1 IP address (1 host up) scanned in 0.88 seconds

VM 上的 ufw 和 iptables...

jeremy@jeremy:~$ sudo service ufw stop
[sudo] password for jeremy: 
ufw stop/waiting
jeremy@jeremy:~$ sudo iptables -L
Chain INPUT (policy ACCEPT)
target     prot opt source               destination         

Chain FORWARD (policy ACCEPT)
target     prot opt source               destination         

Chain OUTPUT (policy ACCEPT)
target     prot opt source               destination       

我四处扫描，没有理由相信我的路由器阻止了内部端口。

jeremy@bangkok:~$ nmap -v 192.168.1.2

Starting Nmap 5.21 ( http://nmap.org ) at 2012-11-15 18:44 CST
Initiating Ping Scan at 18:44
Scanning 192.168.1.2 [2 ports]
Completed Ping Scan at 18:44, 0.00s elapsed (1 total hosts)
Initiating Parallel DNS resolution of 1 host. at 18:44
Completed Parallel DNS resolution of 1 host. at 18:44, 0.03s elapsed
Initiating Connect Scan at 18:44
Scanning 192.168.1.2 [1000 ports]
Discovered open port 445/tcp on 192.168.1.2
Discovered open port 139/tcp on 192.168.1.2
Discovered open port 3306/tcp on 192.168.1.2
Discovered open port 80/tcp on 192.168.1.2
Discovered open port 111/tcp on 192.168.1.2
Discovered open port 53/tcp on 192.168.1.2
Discovered open port 5902/tcp on 192.168.1.2
Discovered open port 8090/tcp on 192.168.1.2
Discovered open port 6881/tcp on 192.168.1.2
Completed Connect Scan at 18:44, 0.02s elapsed (1000 total ports)
Nmap scan report for 192.168.1.2
Host is up (0.0017s latency).
Not shown: 991 closed ports
PORT     STATE SERVICE
53/tcp   open  domain
80/tcp   open  http
111/tcp  open  rpcbind
139/tcp  open  netbios-ssn
445/tcp  open  microsoft-ds
3306/tcp open  mysql
5902/tcp open  vnc-2
6881/tcp open  bittorrent-tracker
8090/tcp open  unknown

Read data files from: /usr/share/nmap
Nmap done: 1 IP address (1 host up) scanned in 0.08 seconds

回答... 原来所有的端口都对网络开放。我安装了 open ssh 并确认了它。然后我编辑了我的 db conf 来监听外部 IP，一切都很好。

Answer 1

Ping 是 ICMP 回显请求，不关心端口。这些仅与 TCP 和 UDP 相关，它们在更高的网络层上运行。