iptables: drop or reject?

[Tim]

On Thu, 2007-10-25 at 13:59 -0700, Rick Stevens wrote:
> 
> If you drop, the packets fall on the floor.  The remote machine will
> no response at all and it appears as if your machine doesn't exist.  I
> think that's best way to handle it.
> 
> If you respond at all (or do a reset), that indicates _something_ is
> at that IP and, depending on how big an *sshole the attacker is, may
> cause them to try other ways to assault you. 

I suspect they might try that, either way.  If you appear not to be
there - we can't abuse the address now, perhaps it might be useable
later.

/me wonders if you could create a firewall rule that redirected them to
connect to their own IP, after a while, so that they attack themselves.

;-)

-- 
(This computer runs FC7, my others run FC4, FC5 & FC6, in case that's
 important to the thread.)

Don't send private replies to my address, the mailbox is ignored.
I read messages from the public lists.