On Jan 23, Ben Pfaff wrote:
> On Wed, Jan 10, 2018 at 06:59:01PM +0100, Lorenzo Bianconi wrote:
> > Whenever the acl reject rule is hit send back an ICMPv4 destination
> > unreachable packet and do not handle reject rule as drop one
> > 
> > Signed-off-by: Lorenzo Bianconi <lorenzo.bianc...@redhat.com>
> It's nice to finally get this right!  Thank you.
> I wonder about the treatment for TCP connections.  A connection attempt
> to a TCP port that is not listening ordinarily yields a TCP RST
> response.  I do not know whether an ICMP reply is acceptable.  Do you
> have any thoughts on that?

I agree, we need to add tcp feature, I was thinking to send a different 
patchset adding tcp stuff.
Do you prefer to squash tcp action to this patchset or repin it with your 

> I think that this should add an item to NEWS that describes the new
> feature.
> Thanks,
> Ben.

dev mailing list

Reply via email to