Jason Opperisano schrieb: > i've seen this list pop up here and there: > > http://www.stearns.org/modwall/sample/tcpchk-sample > > seems pretty complete to me. > > the most common ones you see people creating DROP rules for are: > > ALL ALL > ALL NONE > SYN,FIN SYN,FIN > ALL FIN,URG,PSH > SYN,RST SYN,RST > FIN,RST FIN,RST > FIN,ACK FIN > > -j > > -- Thank´s will take look at that list :). But a last question. --syn is the same as --tcp-flags ALL SYN?