Firewall/NAT

Question about the aproppriate blocking policy.

What is better: return or drop. If I remember correct m0n0wall configuration is blocked. So ports are stealth whilst beeing scanned. For some experimental reason I configured now OpenBSD on my wrap and play a little bit with pf.conf.

Reason for thie experiments. My VPN client still didn't work with m0n0, see my other posting. It works now with my OpenBSD installation.


F41THR

Drop is better as it simply ignores the packet, Im presuming Return is the same as reject meaning a responce is returned to the packet sender meainig they will know of your machines existance.