when I configure a rule to reject tcp/ip traffic to a particular port,
e.g. "ipfwadm -I -a reject -S <source> -D <dest> <port> -P tcp", then
on the host <source> requesting for that connection, ICMP packets
arrive telling something like "port unreachable".
unfortunately, some tcp/ip stacks, at least win/NT and w95, do not understand
these icmp packets and continue to try to open a connection until a timeout
occurres.
wouldn't it make sense to send tcp/ip packets with RST=1 in case a
rule that explictely specifies tcp/ip traffic was configured ?
regards, herbert rosmanith
herp@wildsau.idv.uni-linz.ac.at
rosmanith@edvz.uni-linz.ac.at
NB: kernel version 1.3.74