> Our experience with port 113, the AUTH port, is that peak 
> performance is
> maintained with it allowed through the firewall.  This does 
> not mean the
> AUTH service has to be running.

A better solution would be for your firewall to
RESET, rather than DROP the connection.  This way
the remote server tears down it's query, rather than
waiting for a timeout.


~Patrick
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to