after some research it looks like setting to unreachable better than deny

2013-09-04 11:28:03 -07:00 · 2013-09-04 11:28:03 -07:00 · d258a51a23
parent fe557e5900
commit d258a51a23
1 changed files with 1 additions and 1 deletions
--- a/config/action.d/osx-ipfw.conf
+++ b/config/action.d/osx-ipfw.conf
@ -71,7 +71,7 @@ block = tcp
 #          Common values: deny, unreach port, reset
 # Values:  STRING
 #
-blocktype = deny
+blocktype = unreach port

 # Option:  set number
 # Notes.:  The ipset number this is added to.