On Sat, 30 Oct 2004 18:16, Leonardo Boselli <[EMAIL PROTECTED]> wrote:
> On some machine for which i can edvice but do not have final decision
> there sare some non-exixtent services.

If you block with tcp-reset then not only will the person connecting get a 
fast response, but someone who port scans you won't know which ports don't 
have anything listening on them and which ports are blocked by iptables.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to