NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] SMTP and Unknown Established TCP packet



> Is this a situation in which "reject" is preferable over "drop"?   I'm
> dropping ident traffic as part of my catch-all rule.
Reject is critical here. If you reject the traffic, the mail servers know
there that it is not allowed and continue on with their SMTP session. If
you drop it, then they first wait for that ident session to timeout before
going back to their SMTP session, only the SMTP session has also timed out
by this point.

-Don

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.