Installation guide

70
Table 28 – Nessus SYN and TCP Scanner Settings
Value
Description
Automatic (normal)
This option can help identify if a firewall is located between the scanner and the target
(default).
Disabled (softer)
Disables the Firewall detection feature.
Do not detect RST rate
limitation (soft)
Disables the ability to monitor how often resets are set and to determine if there is a
limitation configured by a downstream network device.
Ignore closed ports
(aggressive)
Will attempt to run plugins even if the port appears to be closed. It is recommended
that this option not be used on a production network.
News Server (NNTP) Information Disclosure (plugin 11033) can be used to determine if there are news servers that are
able to relay spam. Nessus will attempt to post a news message to a NNTP (Network News Transport Protocol) server(s),
and can test if it is possible to post a message to upstream news servers as well.
Table 29 – News Server (NNTP) Information Disclosure Settings
Option
Description
From address
The address that Nessus will use as it attempts to post a message to the news
server(s). This message will delete itself automatically after a short period of time.
Test group name regex
The name of the news group(s) that will receive a test message from the specified
address. The name can be specified as a regular expression (regex) so that the
message can be posted to multiple news groups simultaneously. For example, the
default value “f[a-z]\.tests?” will broadcast a mail message to all news groups with
names that begin with any letter (from “a” to “z”) and end with “.tests” (or some variation
that matched the string). The question mark acts as an optional wildcard.
Max crosspost
The maximum number of news servers that will receive the test posting, regardless of
the number of name matches. For example, if the Max crosspost is “7”, the test
message will only be sent to seven news servers, even if there are 2000 news servers
that match the regex in this field.
Local distribution
If this option is selected, Nessus will only attempt to post a message to the local news
server(s). Otherwise, an attempt will be made to forward the message upstream.