[NBLUG/talk] denying specific hosts via bastille-based firewall?

[augie]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Kyle Rankin wrote:
> Off the top of my head, I can't remember whether DROP or REJECT shows
> up as "(filtered)" when running nmap against the port.  That is a
> consideration though, and for your needs DROP might work better.

i think REJECT shows up as 'filtered', because DROPed packets just cause
nmap to time-out, i think... ;) --augie


- --
irc.nblug.org #nblug
registered linux user #229905
gpg public key: http://www.sonic.net/schwer/schwer.asc
Key fingerprint = 9815 AE19 AFD1 1FE7 5DEE  2AC3 CB99 2784 27B0 C072

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQE+pFLuy5knhCewwHIRAs8gAJwKc5NMoOIBpe4CsOIAEOTvovB7FwCdHffS
XD4dgLC01nLbJgEhUkfqtMM=
=ZndQ
-----END PGP SIGNATURE-----