I have selfhosted various services on some ports but I don't see them
with NMAP
reddit / selfhosted

----------------------------------------------------------------------
mrRNobodY1 · 2023-11-24 17:53

Hi all,
I have selfhosted various services on my server via docker such as the
whole *rr suite, plex, jellyfin, pihole, nginx, qbittorrent.

Out of curiosity I ran an nmap on the server IP but I see a lot less
ports than I actually use.

With `nmap 192.168.1.180` i see:

-       ` 53/tcp   open domain `
-       ` 80/tcp   open http `
-       ` 81/tcp   open hosts2-ns  [this is nginx] `
-       ` 443/tcp  open https `
-       ` 6881/tcp open bittorrent-tracker `
-       ` 8080/tcp open http-proxy [this is pihole] `
-       ` 9091/tcp open xmltec-xmlmail  [this is qbittorrent] `

Why don't I see all the ports for all the services?

----------------------------------------------------------------------
timothyclaypole · 2023-11-24 18:21

The majority of those are basically web apps so all of them would
(normally) be exposed through the https port - which I see you do have
listed in your nmap.

If you are operating these through a reverse proxy then the one https
port is likely all that you have open and nmap is showing the correct
results.

If you have these individually on different non standard ports then
you need to make sure that your nmap scan is actually testing for
those non standard port numbers.

----------------------------------------------------------------------
mrRNobodY1 · 2023-11-24 18:39

Understood. Thank you very much for your help.

In fact:
-       I am using a reverse proxy for all the services I have
selfhosted
-       I thought nmap scanned the whole range of ports, instead it
stops at the first 1000 I think. What a dummy I am.

Another question: having in LAN all these open ports is okay right?
I'm going to set up a VPN with WireGuard and the only port I'm going
to open on the router is the WireGuard port.

----------------------------------------------------------------------
ethansky · 2023-11-24 20:24

>-      I thought nmap scanned the whole range of ports, instead it
stops at the first 1000 I think. What a dummy I am.

It defaults to the top 1000 ports, but you can have it scan all the
tcp ports with the `-p-` flag.

----------------------------------------------------------------------
zoredache · 2023-11-25 00:55

Are you running nmap from the system itself?  Depending on the network
type you use docker does some pretty complicated things with NAT, so
scanning a machine from itself isn't always very useful.

----------------------------------------------------------------------
axsd9id1 · 2023-11-27 15:34

Use nmap -p 1-65535