hm.... I think sending "host unreachable" from the host which should not be reachable is not what you want. Alos sending "host unreachable" will increase your traffic (not much, but it did :) ). But I think most "attack" tools will ignore trys to make yourself invisible. greez Daniel Am Sonntag, 20. November 2005 19:33 schrieb Michael D. Berger: > For blocking various attacks on ports 22 and 80, > I have been using: > -j REJECT --reject-with icmp-host-unreachable > To minimize future attempts, is this best, or is > there a better idea, such as DROP? > Thanks for your advice, > Mike. > -- > Michael D. Berger > m.d.berger@xxxxxxxx
