Smoothwall logs

Sam Couter sam at topic.com.au
Mon Jan 21 12:16:54 EST 2002


Alex Satrapa <grail at goldweb.com.au> wrote:
> I'd be tempted to drop them (REJECT) quietly.

The pedant in me insists I must respond:

REJECT is not quiet. It will send an ICMP packet back to the dropped
packet's source, informing it of the droppage.

With ipchains, DENY will drop the packet on the floor and not send an
ICMP error packet. With iptables, the target is named DROP.
-- 
Sam "Eddie" Couter  |  mailto:sam at topic.com.au     |  I need a short and
Internet Engineer   |  jabber:eddiesam at jabber.org  |  clever comment for
tSA Consulting      |  http://www.topic.com.au/    |  my .signature file
OpenPGP fingerprint:  A46B 9BB5 3148 7BEA 1F05  5BD5 8530 03AE DE89 C75C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url : http://lists.samba.org/archive/linux/attachments/20020121/8326222f/attachment.bin


More information about the linux mailing list