On Thu, 2007-10-25 at 13:59 -0700, Rick Stevens wrote: > > If you drop, the packets fall on the floor. The remote machine will > no response at all and it appears as if your machine doesn't exist. I > think that's best way to handle it. > > If you respond at all (or do a reset), that indicates _something_ is > at that IP and, depending on how big an *sshole the attacker is, may > cause them to try other ways to assault you. I suspect they might try that, either way. If you appear not to be there - we can't abuse the address now, perhaps it might be useable later. /me wonders if you could create a firewall rule that redirected them to connect to their own IP, after a while, so that they attack themselves. ;-) -- (This computer runs FC7, my others run FC4, FC5 & FC6, in case that's important to the thread.) Don't send private replies to my address, the mailbox is ignored. I read messages from the public lists.
