Hmm... Making, drinking tea and reading an opus magnum from Matt Pearce:
ok.. I think we need to further debug this.. Can you send logs of ipf when you try to open outgoing connection with nmap? (Please also include):The reason I have the # before the portmap is because I cant use ping from a client machine if it is there, and being as I was only playing with it and dont need it I have disabled that particular bit.
1) ipmon -o -S
2) ipmon -o -I
3) ipmon -o -N
Why above? Can try 'n comment it out and see if it works?5 block out quick on sis0 from any to any
Plus, I'm trying to understand your network.
sis0 - external interface
sis1/wi0 - internal interface.
When you try to scan via nmap which device does it use for its default route? (Perhaps tcpdump while you do the nmap would give more clear idea on what's going on).
PS - Can you nmap any other host?
-Bruno
----------------------------------------------------------------------
Our company accepts no liability for the content of this email, or for
the consequences of any actions taken on the basis of the information
provided, unless that information is subsequently confirmed in
writing. If you are not the intended recipient you are notified that
disclosing, copying, distributing or taking any action in reliance on
the contents of this information is strictly prohibited.
http://www.wf0.com
----------------------------------------------------------------------
