"kind of the same as setting the source port of the scan as 53, which will confuse older firewalls.. "

can you explain... why is that???

also since we are on the subject, does anyone know why sometimes syn scan can discover more sockets open than connect???