Re: What to return for AUTH tcp/113 requests?

["Ralf G. R. Bergs" <rabe@RWTH-Aachen.DE>]

On Thu, 29 May 2003 19:29:52 +0530, Raghavendra Bhat wrote:

>moseley posts:
>
>>> it's not  good to just  drop the auth  (ident) requests --  IIRC it
>>> makes mail clients delay.
>>>
>>> the question is how should they be rejected?
>
>I dunno  why you say  that a drop  makes the client delay.   Maybe you
>should ULDROP  it and log the  ident/whatever request on  a port using
>ulogd.

Dropping the request in fact DOES make the client wait until it gets a timeout.

One should REJECT the request instead, probably using "port unreachable."


-- 
   L I N U X       .~.
  The  Choice      /V\
   of a  GNU      /( )\
  Generation      ^^-^^