I tried to scan one of the routers in our office from a virtual machine connected to a different router.
When the virtual machine is connected to the Internet (directly?) Nmap gives up straight away
but when the virtual machine is connected using a NAT Nmap switches to SYN scan?