Can someone tell me how nmap sees "filtered" ports? I've got my rule se to reject and nmap can see that something is there but it is being rejected. I thought "REJECT" would appear as if there was no one bind ()'ing on that port?