On Fri, 15 Dec 2000 12:54:40 +0100, you wrote:
named "Closing Identd service with Ipchains". Read it. The summary is that SuSEfirewall uses ipchains, and ipchains cannot "reject" packages for itself, but only "deny" them. Solutions: use fw which ships with kernel
But "man ipchains" also names REJECT, not only ACCEPT, DENY, and so on.
Sorry, sorry, sorry. Ipchains do support "reject", i.e., deny the packets and send icmp responses indicating it. I was confused with another "target" that is missing in ipchains: the one that would send a RST packet (indicating the port is CLOSED) (as opposing to FILTERED)... Read the former thread anyway. It could be useful. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= ** RoMaN SoFt / LLFB ** roman@madrid.com http://pagina.de/romansoft ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~