TCP SYN FIN

[Steve Comfort <steve@xxxxxxxxx>]

Hi All,

I'm running Nessus to check my firewall rules, and its telling me :

"remote host does not drop TCP SYN packets with the FIN flag set .... "

I've tried adding the following rule :

$ipt -A INPUT -i $iface -d $network -p tcp --tcp-flags SYN,FIN SYN, FIN 
-j DROP

and a few permutations, but the warning still appears.

How do I fix this?

Best regards
Steve