u should drop it because a reject will send a response the host. > > From: Matthias Leu <[EMAIL PROTECTED]> > Date: 2003/10/03 Fri PM 01:22:31 EDT > To: [EMAIL PROTECTED] > Subject: Re: [FW-1] Last Rule > > Devon Harding - GTHLA wrote: > > Should my last rule be ANY-ANY-REJECT or ANY-ANY-DROP? > > > Hi, > the "classic" Clean-Up rule is to DROP and to LOG. Drop is useful > because in case of an attack the sender doesn't get an answer from the > Firewall. So he can't make out if the systems is up or even turned on. > Ok, I know, in this case I'm an optimist ;-) > Logging should be turned on, so you see the traffic beeing dropped. > Otherwise, you could rely on the "implicit Drop-rule" which is the very > last rule and always turned on, but without logging. > Hope it helps, > best regards, > Matthias > http://www.fw-1.de > -- > Visit us at the SYSTEMS 2003 - IT-SecurityArea - B2.713 > Munich, 20.10.2003 - 24.10.2003 > --- > AERAsec Network Services and Security GmbH > Wagenberger Strasse 1 > D-85662 Hohenbrunn, Germany > http://www.aerasec.de > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= >
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
