The difference is subtle, but important.  Typically, to deny packets means
to quietly drop them without notice.  The source doesn't get any kind of
response at all.  Packets that are "rejected" are dropped, just the same,
but an RST is sent back to the source to immediately notify the source it
cannot connect.

Which action you desire depends on the circumstances...


-----Original Message-----
From: Bennett Samowich [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, September 08, 1999 4:43 AM
To: Firewalls
Subject: deny or reject


This may be another newbie question, when "dis-allowing" certain packets
is it better to deny or reject? Why the different actions?

Thanks
- Bennett

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to