after some research it looks like setting to unreachable better than deny

This commit is contained in:
Andy Fragen 2013-09-04 11:28:03 -07:00
parent fe557e5900
commit d258a51a23

View file

@ -71,7 +71,7 @@ block = tcp
# Common values: deny, unreach port, reset
# Values: STRING
#
blocktype = deny
blocktype = unreach port
# Option: set number
# Notes.: The ipset number this is added to.