Smoothwall logs

Sam Couter sam at
Mon Jan 21 12:16:54 EST 2002

Alex Satrapa <grail at> wrote:
> I'd be tempted to drop them (REJECT) quietly.

The pedant in me insists I must respond:

REJECT is not quiet. It will send an ICMP packet back to the dropped
packet's source, informing it of the droppage.

With ipchains, DENY will drop the packet on the floor and not send an
ICMP error packet. With iptables, the target is named DROP.
Sam "Eddie" Couter  |  mailto:sam at     |  I need a short and
Internet Engineer   |  jabber:eddiesam at  |  clever comment for
tSA Consulting      |    |  my .signature file
OpenPGP fingerprint:  A46B 9BB5 3148 7BEA 1F05  5BD5 8530 03AE DE89 C75C
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 232 bytes
Desc: not available
Url :

More information about the linux mailing list