On Tue, Feb 03, 2004 at 05:38:40AM +0100, Philipp Schulte wrote: > No, with REJECT they would show up as "closed". DROP produces "filtered". FWIW, you also need "--reject-with tcp-reset" to fool nmap. Richard -- __ _ |_) /| Richard Atterer | GnuPG key: | \/¯| http://atterer.net | 0x888354F7 ¯ '` ¯