Re: ICMP dest-unreach in SYN_* states of TCP

[kuznet]

Hello!

> Q: Any chance of changing the firewall send a TCP RST instead of ICMP
> dest. unreachable?

I strongly suspect Paul already does it in netfilter. 8)8)8)

But generally: linux will send fake RSTs only via my corpse.
If firewalls will start to use RST instead of ICMP, we have to
ignore RST in established state. Is it good? The question is rethoric.

Alexey
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]