Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

Register Log in
  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Deny vs. Discard

Status
Not open for further replies.
ajharn

ajharn

IS-IT--Management
Jun 8, 2002
71
US
Hi All,

Just wondering if there were any caveats to using Discard over Deny when setting up rules to block traffic. I believe I have seen references to things that won't work correctly if you turn on stealth mode (Discard All). If I, for instance, am just singling out a few hosts that regularly bounce traffic off of my firewall, is there any reason not to use Discard over Deny. Discard certainly seems like the better option for most cases.

Any wisdom appreciated.

Thanks,
AJ
 
Status
Not open for further replies.

Similar threads

snootalope
  • Locked
  • Question
Allow/Deny - Which over-rides?
Replies
1
Views
48
iggsterman
iggsterman
ochie
  • Locked
  • Question
ASA 5505 Ipsec tunnel/firewall deny all rule hitting RTP packets
Replies
0
Views
52
ochie
ochie
netjess
  • Locked
  • Question
ASA5510, internal, deny inbound, due to DNS Query 1
Replies
10
Views
126
netjess
netjess
ProXXio
  • Locked
  • Question
Deny inbound (No xlate) icmp src
Replies
3
Views
77
unclerico
unclerico
minum
  • Locked
  • Question
udp request discarded
Replies
0
Views
75
minum
minum

Part and Inventory Search

Sponsor

Back
Top