Hi Kris!

Am Samstag, den 03.09.2005, 20:22 -0400 schrieb Kris Maglione:
> I don't like having to add two rules when I have to do this. I
> understand that a tcp reject rule is slightly different from a udp
> reject rule, 
This is excactly the reason, why I don't wanted to handle this in a
single rule.
> and I'd be glad to provide a patch to generate two rules in
> such a circumstance, provided that the feature would be accepted.
Do so, provide us with the patch. I was also wondering, if it makes
sense, to allow to select how to respond to a blocked packet
(return-icmp-as-dest(port-unr) for example). I left that out because of
simplicity.

Ciao ...
	... PIT ..


---------------------------------------------------------------------------
 copyleft(c) by |           /*  * Buddy system. Hairy. You really aren't
 Peter Allgeyer |   _-_     expected to understand this  *  */  -- From
                | 0(o_o)0   /usr/src/linux/mm/page_alloc.cA
---------------oOO--(_)--OOo-----------------------------------------------