Re: Packets from 255.255.255.255(80) (was: Packet from port 80 with spoofed microsoft.com ip)

On Fri, 31 Jan 2003, Tomasz Papszun wrote:

> On Fri, 31 Jan 2003 at 3:01:49 +0100, Peter Triller wrote:

The default behaviour for filtering must be to DROP the packets. This is standard in all known firewalls and should be considered common knowledge.

Some call this stealth mode.

Hugo.

-- 
 All email sent to me is bound to the rules described on my homepage.
    
hvdkooij(at)vanderkooij.org		
http://hvdkooij.xs4all.nl/
	    Don't meddle in the affairs of sysadmins,
	    for they are subtle and quick to anger.


----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: 
http://aris.securityfocus.com