So, Don, contrary to what I understood from a previous mail of yours on this, you agree with me in that "silent" (in the question's context) may not only mean "no logging" but also "drop (as opposed to reject)"...
Agree ? ;-) Regards, J. >From: Don <[EMAIL PROTECTED]> >Reply-To: Mailing list for discussion of Firewall-1 ><[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Subject: Re: [FW-1] Silent Drop Rule >Date: Thu, 11 Apr 2002 10:01:13 -0400 > > > Sorry, the first answer was not the corrcet one. > > > > You should use a silent drop rule for services that you are sure you do >not > > want to allow, and you do not want them to appear in log (making the log > > file grow). > > > > There is no defined dervice to include in silent drop rule, that's your > > decision. >Then this would not be much of a useful question now would it? > >Secondly, the only service in that list that I would definitely want >to drop on is netbios as it a) probably should not be traversing the >firewall in the first place, and b) I would not want the firewall sending >explicit reject would for every netbios packet that happens to be >generated. As a result, netbios is still the correct answer. > >-Don > >================================================= >To set vacation, Out Of Office, or away messages, >send an email to [EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[EMAIL PROTECTED] >================================================= _________________________________________________________________ Join the world�s largest e-mail service with MSN Hotmail. http://www.hotmail.com ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
