
Have to dig deeper and see what it really means though. The -L means “listen harder, re-listen on socket close” :). If you run this on a Windows 7 machine, you will get this dreaded message “local listen fuxored: INVAL”. The command to have netcat listen on a specific port is “nc -l PORT_NUMBER”. You can download the windows port of the tool at

If I am not mistaken, nc comes as a default tool in most of the Linux distros. You can run netcat on your workstation to listen on port 80, assign the IP address of the web server to your workstation and test the rule. But your web server is not built yet and you want to validate the rule. For example, say, you configured your firewall to allow TCP 80 traffic to your web server. You can use it to listen on certain ports or connect to certain ports.

Netcat is a swiss army tool for network/security professionals.
