From owner-freebsd-current Tue May 6 03:33:01 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.5/8.8.5) id DAA03623 for current-outgoing; Tue, 6 May 1997 03:33:01 -0700 (PDT) Received: from ocean.campus.luth.se (ocean.campus.luth.se [130.240.194.116]) by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id DAA03603; Tue, 6 May 1997 03:32:56 -0700 (PDT) Received: (from karpen@localhost) by ocean.campus.luth.se (8.7.5/8.7.3) id MAA26007; Tue, 6 May 1997 12:37:40 +0200 (MET DST) From: Mikael Karpberg Message-Id: <199705061037.MAA26007@ocean.campus.luth.se> Subject: Re: divert still broken? To: danny@panda.hilink.com.au (Daniel O'Callaghan) Date: Tue, 6 May 1997 12:37:40 +0200 (MET DST) Cc: current@FreeBSD.ORG, hackers@FreeBSD.ORG In-Reply-To: from Daniel O'Callaghan at "May 6, 97 08:10:40 pm" X-Mailer: ELM [version 2.4ME+ PL22 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-current@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk According to Daniel O'Callaghan: > > > On Tue, 6 May 1997, Michael Reifenberger wrote: > > > > > So the choices are: > > > > deny : be silent > > > > reject: send ICMP !H > > > > reset : send RST > > > > > > Sounds OK with me.. any body else care to comment? > > > > In this case wouldn't match the keyword drop better than deny? > > Maybe. But it is better to keep the backward compatibility. That doesn't mean that drop isn't a better keyword, and should be made an alias for deny. Although, if it wasn't for backwards compability (which we should keep, IMHO) then it would be better with: drop : be silent deny : send RST reject : send ICMP !H netreject : send ICMP !N But... that's not gonna happen, because we want backwards compability, so just forget I said it... :-) /Mikael