On Fri, 04 Nov 2005, Rakotomandimby Mihamina wrote: > He has the choice to REJECT or to DROP. It's a bit different. > I'd vote for REJECTing. Or, for ssh attacks, TARPIT. It won't DoS your uplink, and it slows the attackers. -- "One disk to rule them all, One disk to find them. One disk to bring them all and in the darkness grind them. In the Land of Redmond where the shadows lie." -- The Silicon Valley Tarot Henrique Holschuh