Re: iptables firewall
2014-07-30 17:33 keltezéssel, Mike McClain írta:
>> And as someone else asked, why are you worried about this 'stealth'? As
>> long as the bad packets don't get in, what does it matter?
>
> Why is there a DROP instruction in iptables as well as REJECT?
To allow you to do what you want. e.g DROP can slow down portscans and
if your host does not reply to ping either sometimes it will not be
found by scanners.
>
> If a hacker gets no response he's less likely to dig further.
REJECT is actually a response :)
--
--- Friczy ---
'Death is not a bug, it's a feature'
Reply to: