0

Setup: 2 host-only ints each connected to a separate host on a separate network PFsense VM routing between 2 networks (implicit accept on both networks, no other rules)

Can receive normal, syn,syn/ack,rst/ack, ACK, etc, essentially all the normal traffic you'd expect to see, but when I do a NULL/FIN or XMAS scan on nmap (nmap -sX ), I get an ICMP request, reply, timestamp, and a syn & rst/ack packets, but not the NULL, FIN or PSH/URG/FIN.

Wondering if anyone has come across this before. Maybe it's blocked by an underlaying rule in PFsense/ my Linux kernel version but I cant find the right literature to confirm.

Kernel version: 5.19.0-32-generic

enter image description here

Alexander Tolkachev
  • 4,608
  • 3
  • 14
  • 23
Jack
  • 1
  • 1

0 Answers0