Even as root, I can't send raw packets to my friend's network (nmap -v -sS xxx.yyy.zzz.aaa).

I get this error:

sendto in send_tcp_raw: sendto(3, packet, 60, 0, xxx.yyy.zzz.aaa, 16) => Operation not permitted

There must be something being dropped by my iptables script. I've removed my GUI firewall but there is still an iptables script in play (/sbin/iptables -L tells me that much).

Q: What rule do I need to add to allow these (and other) packets to be sent by nmap?

Q2: How do I ensure that this rule becomes a permanent part of my firewall structure?

Thanks!!!!