Joe S escreveu:
OS: OpenBSD 4.4 RELEASE i386
PF is blocking traffic that I want it to pass. I notice this when I
run nmap 4.76 (compiled from source). It appears that my packets are
being dropped because they don't match the "pass out quick" rule in my
pf.conf. I noticed this rule is modified due to the default setting to
match on flags S/SA. How do I create a rule to ignore the flags S/SA
so that my scans can complete?
You need to user something like "flags any" so any flags on the TCP will
be allowed.
HTH,
Vinicius
