"operation not permitted"Oh, that's why my nessus scan diedOh well....
From the nmap output it looks like the firewall is doing its job. I don't have Leopard yet (will buy my MacBook in a few weeks and start tinkering) so I don't know what the Leopard firewall does. Just for interest sake, what does 'ipfw list' in a terminal show you?