SYN stealth scanning in FreeBSD

[Thomas Novin <thnov () xyz pp se>]

I hope this is the right forum for this. Whats up with SYN stealth scanning 
in FreeBSD? I've googled web+groups without any answers but I've seen quite 
a lot of people having the problem. Any ideas what to tweak to be able to 
use SYN stealth scan?

This is the output from a nmap scan attempt (same result with -T normal and 
only -sS -F):

root () freebsd4 8 with ipfw:~# nmap -v -O -T Insane 1.2.3.4

Starting nmap 3.46 ( http://www.insecure.org/nmap/ ) at 2003-10-02 21:32 CEST
Host 1.2.3.4 appears to be up ... good.
Initiating SYN Stealth Scan against 1.2.3.4 at 21:32
Adding open port 213/tcp
Adding open port 8080/tcp
sendto in send_tcp_raw: sendto(3, packet, 40, 0, 1.2.3.4, 16) => Permission 
denied
Sleeping 15 seconds then retrying
sendto in send_tcp_raw: sendto(3, packet, 40, 0, 1.2.3.4, 16) => Permission 
denied
Sleeping 60 seconds then retrying
sendto in send_tcp_raw: sendto(3, packet, 40, 0, 1.2.3.4, 16) => Permission 
denied
Sleeping 240 seconds then retrying
sendto in send_tcp_raw: sendto(3, packet, 40, 0, 1.2.3.4, 16) => Permission 
denied
sendto in send_tcp_raw: sendto(3, packet, 40, 0, 1.2.3.4, 16) => Permission 
denied



--
Thomas Novin · thnov () xyz pp se · http://xyz.pp.se/~thnov/
V: +46 (0)431 445400 · F: +46 (0)431 445410 · GSM: +46 (0)730 667425
--



---------------------------------------------------------------------
For help using this (nmap-dev) mailing list, send a blank email to 
nmap-dev-help () insecure org . List run by ezmlm-idx (www.ezmlm.org).