Iptables doesn't block SYN-FIN packets?

["Ascent - Compton, Richard" <RCompton () ascent-corp com>]

Hello, 
I'm running an iptables firewall and I thought that everything was well but
my snort logs are recording SYN-FIN portscans getting through.  
I have two questions:
Is anyone here familiar with the problem of iptables not blocking SYN-FIN
packets?  
Nmap doesn't seem to do SYN-FIN scans. Is there a portscanner that you guys
know about that I could use to test the effectiveness of my firewall?

Thanks,
Rich Compton
_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards