RST wouldn't be the right thing to do if you choose to reject anyway; ICMP Administratively Prohibited would be the correct response.
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, April 04, 2008 9:42 To: Javier Liendo Cc: [email protected] Subject: Re: [c-nsp] OT: Check Point v Cisco PIX (ASA 5500 Series) Hi, > for a firewall, not sending an RST for a denied connection, isn´t it > the "Right Thing" to do? ah, the perennial DROP or REJECT question. alan _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
