From owner-freebsd-security Sat May 26 13:46:47 2001 Delivered-To: freebsd-security@freebsd.org Received: from verdi.nethelp.no (verdi.nethelp.no [158.36.41.162]) by hub.freebsd.org (Postfix) with SMTP id 4ED4237B424 for ; Sat, 26 May 2001 13:46:41 -0700 (PDT) (envelope-from sthaug@nethelp.no) Received: (qmail 71475 invoked by uid 1001); 26 May 2001 20:46:39 +0000 (GMT) To: jgross@stimpy.net Cc: freebsd-security@FreeBSD.ORG Subject: Re: 'nother IPFW question From: sthaug@nethelp.no In-Reply-To: Your message of "Fri, 25 May 2001 14:49:37 -0700" References: <20010525144937.A60462@felix.stimpy.net> X-Mailer: Mew version 1.05+ on Emacs 19.34.2 Mime-Version: 1.0 Content-Type: Text/Plain; charset=us-ascii Date: Sat, 26 May 2001 22:46:38 +0200 Message-ID: <71473.990909998@verdi.nethelp.no> Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > Augh! Why wouldn't you just have the firewall refuse the connection? It's a > bad idea to pass anything through your firewall that you don't want on your > internal network. If you can get your firewall to send a TCP RST, it make sense. If your firewall simply drops the packet, you have just introduced quite a bit of delay in many of your email transactions (while the mail server at the other end waits for the IDENT request to timeout). Steinar Haug, Nethelp consulting, sthaug@nethelp.no To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message