Hi All, I have for a while been trying to resolve a problem with nmap not working after I changed versions of FreeBSD (and hence IPFilter, I went from version 4.6.2 to 4.7 of FreeBSD). The error message I get is:-
sendto in send_tcp_raw: sendto(3, packet, 40, 0, xxx.xxx.xxx.xxx, 16) => No route to host Sleeping 15 seconds then retrying Can someone tell me how to fix this or at least why its doing it and where to look to find the solution ?? The address I am trying to Nmap is an external address and below I have included my ipf.rules and ipnat.rules contents below. TIA Matt. ipf.rules :- ################################################################# # Outside Interface ################################################################# pass out quick on sis0 proto tcp from any to any flags S keep state keep frags pass out quick on sis0 proto udp from any to any keep state pass out quick on sis0 proto icmp from any to any keep state block out quick on sis0 all #----------------------------------------------------------------------- # Block all inbound traffic from non-routable or reserved address spaces #----------------------------------------------------------------------- block in log quick on sis0 from 192.168.0.0/16 to any #RFC 1918 private IP block in log quick on sis0 from 172.16.0.0/12 to any #RFC 1918 private IP block in log quick on sis0 from 10.0.0.0/8 to any #RFC 1918 private IP block in log quick on sis0 from 127.0.0.0/8 to any #loopback block in log quick on sis0 from 0.0.0.0/8 to any #loopback block in log quick on sis0 from 169.254.0.0/16 to any #DHCP auto-config block in log quick on sis0 from 192.0.2.0/24 to any #reserved for doc's block in log quick on sis0 from 204.152.64.0/23 to any #Sun cluster interconnect block in quick on sis0 from 224.0.0.0/3 to any #Class D & E multicast pass in quick on sis0 proto udp from 203.164.2.55/32 to any port = 68 keep state pass in quick on sis0 proto tcp from any to any port = 22 flags S keep state keep frags pass in quick on wi0 proto tcp from any to any port = 22 flags S keep state keep frags #pass in log quick on sis0 proto tcp from any to any port 6891 >< 6900 flags S keep state keep frags #pass in log quick on sis0 proto udp from any to any port 5004 >< 65535 keep state #pass in log quick on sis0 proto tcp from any to any port = 3389 flags S keep state keep frags # block return-rst in log quick on ed0 proto tcp from any to any # block return-icmp-as-dest(port-unr) in log quick on ed0 proto udp from any to any block in log quick on sis0 all ################################################################# # Inside Interface ################################################################# #---------------------------------------------------------------- # Allow out all TCP, UDP, and ICMP traffic & keep state #---------------------------------------------------------------- pass out quick on sis1 proto tcp from any to any flags S keep state keep frags pass out quick on sis1 proto udp from any to any keep state pass out quick on sis1 proto icmp from any to any keep state pass out quick on wi0 proto tcp from any to any flags S keep state keep frags pass out quick on wi0 proto udp from any to any keep state pass out quick on wi0 proto icmp from any to any keep state block out quick on sis1 all block out quick on wi0 all #---------------------------------------------------------------- # Allow in all TCP, UDP, and ICMP traffic & keep state #---------------------------------------------------------------- pass in quick on sis1 proto tcp from any to any flags S keep state keep frags pass in quick on sis1 proto udp from any to any keep state pass in quick on sis1 proto icmp from any to any keep state pass in quick on wi0 proto tcp from any to any flags S keep state keep frags pass in quick on wi0 proto udp from any to any keep state pass in quick on wi0 proto icmp from any to any keep state block in quick on sis1 all block in quick on wi0 all ################################################################# # Loopback Interface ################################################################# #---------------------------------------------------------------- # Allow everything to/from your loopback interface so you # can ping yourself (e.g. ping localhost) #---------------------------------------------------------------- pass in quick on lo0 all pass out quick on lo0 all ipnat.rules :- map sis0 192.168.0.0/16 -> 0/32 #portmap tcp/udp auto
