On Wed 2005.09.14 at 13:38 -0500, eric wrote: > On Wed, 2005-09-14 at 08:26:13 +0200, [EMAIL PROTECTED] proclaimed... > > > Isn't PF your problem? Do you have it enabled? It might be blocking your > > network traffic, causing this behavior. Check your logs and > > /etc/pf.conf. > > I moved to using "set skip on $scan_if" where $scan_if is the scanning > interface of the machine. Now things seem to move quicker in nmap; I haven't > tried nessusd yet. A few minutes ago I made a post regarding ping(8) and > sending out different interfaces than what has a default route. Once I get > that figured out, I'm sure things will move quicker since there will only be > scanning packets sent/recv'ed on $scan_if.
set skip, or quick without state...remember default state limits within pf(4), especially if you are doing syn scans.