Re: ICMP dest-unreach in SYN_* states of TCP

[Paul Rusty Russell]

In message <[EMAIL PROTECTED]> you write:
> > Q: Any chance of changing the firewall send a TCP RST instead of ICMP
> > dest. unreachable?
> 
> I strongly suspect Paul already does it in netfilter. 8)8)8)

No I don't.  See, Alexey, I do listen sometimes 8).  ipfilter can send
RSTs.  Someone can write a netfilter/iptables extention to send RSTs.
I won't be doing it by default though.

Rusty.
--
Tridge, Raster, DaveM, Cort, maddog... Where will you be 9-11 July 1999?
                http://www.linux.org.au/projects/calu
-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]