On Tue, Nov 17, 1998 at 10:10:02AM +1200, Keith Owens wrote:
> On Sun, 15 Nov 1998 23:42:52 -0800,
> Danek Duvall <[EMAIL PROTECTED]> wrote:
> >I'm having a problem with some sendmail programs refusing to acknowledge me
> >if I have my firewall's 113 (auth) port set to REJECT.
>
> There are broken TCP stacks out there which treat ICMP port unreachable
> (firewall reject) as ICMP host unreachable. Instead of dropping just
> the ident session, they drop all sessions to your host. Best to let
> ident through the firewall and just not run the daemon.
I'm willing to do that, but only if its because it's the other person who's
running a broken OS. It's an ugly solution, and I just hate that sort of
thing.
If it's a configuration error on their end, I'd like to tell them so and
how to fix it. If it's a broken OS and their only solution is to upgrade,
then that's too much to ask.
I'm basically just looking for some sort of concensus on where the problem
lies. It doesn't look like it's my fault, but if there are any specifics
people know about what the other end's problem is, that'd be great.
Many thanks,
Danek
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]
