Re: ICMP dest-unreach in SYN_* states of TCP

[Taral]

On Wed, 14 Jul 1999, Tim Fletcher wrote:

> Not always, consider a firewall that is partway though boot, and as a
> security measure puts a deny all on the external interface until the boot
> process is finished, and then finally runs a firewall setup script.

I said REJECT, not deny. Anyone who puts a general reject rule when
booting deserves what they get.

Taral

-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]