For blocking various attacks on ports 22 and 80, I have been using: -j REJECT --reject-with icmp-host-unreachable To minimize future attempts, is this best, or is there a better idea, such as DROP? Thanks for your advice, Mike. -- Michael D. Berger m.d.berger@xxxxxxxx
