You have it right. If you put reject, the customer will receive a response to his request, which you don't want (especially if he is a security hacking kinda-individual).
Okan Yucel <[EMAIL PROTECTED]> wrote: I use : Rule Before Last Rule: LocalNet | ANY | ANY | REJECT | LOG Last Rule: ANY | ANY | ANY |DROP | LOG -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Devon Harding - GTHLA Sent: Friday, October 03, 2003 7:51 PM To: [EMAIL PROTECTED] Subject: [FW-1] Last Rule Should my last rule be ANY-ANY-REJECT or ANY-ANY-DROP? _____________________ Devon Harding System Administrator Gilat Latin America 954-858-1600 [EMAIL PROTECTED] This e-mail is intended for the above named addressee(s), and may contain information which is confidential or privileged. If you are not the intended recipient, please inform us immediately: you should not copy or use this e-mail for any purpose nor disclose its contents to any person. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= Christopher J. Dias - CCSA, CCSE (Checkpoint), MCP + I,MCSE, (Microsoft), CCNA, CCNP (Cisco). CSE (Novell) C�m:1121 Budapest F�lemile �t 12-18 4.�p.3/11. Telefon: 36 1 275-4008 Mobil:06-20/803 9687 [EMAIL PROTECTED] --------------------------------- Do you Yahoo!? The New Yahoo! Shopping - with improved product search ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
