nmap

[zeus@xxxxxxxxxxxxxxxx (zeus)]

> OK but if I set the policy OUTPUT at DROP which ports/prot I have to set to
> ACCEPT?  This's my problem.

you can use the ownercmd patch in p-o-m for this:

iptables -A OUTPUT -m owner --cmd-owner nmap -j ACCEPT

-Bob