If your idea is to make your firewall and invisible as possible I would suggest Any-Any-Drop-Log (Drops the packets silently) if you need to make sure the connection on the other (incoming connection) is closed out as soon as possible then use Any-Any-Reject-Log; this has the downside of letting the device on the other end (One that initiated the connection) that there is a device there that is blocking the connection instead just seeing nothing.
Chris C. Burton Network Engineer Walt Disney Internet Group: Network Services -----Original Message----- From: Devon Harding - GTHLA [mailto:[EMAIL PROTECTED] Sent: Friday, October 03, 2003 9:51 AM To: [EMAIL PROTECTED] Subject: [FW-1] Last Rule Should my last rule be ANY-ANY-REJECT or ANY-ANY-DROP? _____________________ Devon Harding System Administrator Gilat Latin America 954-858-1600 [EMAIL PROTECTED] This e-mail is intended for the above named addressee(s), and may contain information which is confidential or privileged. If you are not the intended recipient, please inform us immediately: you should not copy or use this e-mail for any purpose nor disclose its contents to any person. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
