after some research it looks like setting to unreachable better than deny

pull/340/head
Andy Fragen 2013-09-04 11:28:03 -07:00
parent fe557e5900
commit d258a51a23
1 changed files with 1 additions and 1 deletions

View File

@ -71,7 +71,7 @@ block = tcp
# Common values: deny, unreach port, reset # Common values: deny, unreach port, reset
# Values: STRING # Values: STRING
# #
blocktype = deny blocktype = unreach port
# Option: set number # Option: set number
# Notes.: The ipset number this is added to. # Notes.: The ipset number this is added to.