Re: Port 113

[Pere Camps]

Hello,

> request and tries again before giving up.  There was also mention of a way
> to have the f/w do something other than silently drop the packet to allow
> the server to give up more quickly.  

        Don't know how to set it up in pix, but what you have to do is to
REJECT the packets instead of DENYING them. DENY simply drops them and
REJECT drops them AND sends the client an ICMP destination-unreachable
packet.

        HTH.

-- p.

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]