Date: Mon, 28 May 2001 00:55:45 -0700 (PDT) From: patl@Phoenix.Volant.ORG To: freebsd-security@freebsd.org Subject: ipfw: reset -vs- unreach port Message-ID: <ML-3.4.991036545.6838.patl@asimov.phoenix.volant.org>
next in thread | raw e-mail | index | archive | help
There are a few 'nuisance' TCP services that are normally blocked by firewalls (e.g., auth [113] and netbios-ns [137]) In the interest of reducing the delays which would be imposed by simply dropping those packets, is it better to use 'reset' (send an RST), 'unreach port' (send a Port Unreachable ICMP message), or 'unreach filter-prohib' (send a Filter Prohibition ICMP message) ? Or is there another even better option? Thanks, -Pat To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?ML-3.4.991036545.6838.patl>