iptables +block country

[Res]

On Mon, 16 Aug 2010, Markus Schönhaber wrote:

> You can't hide your "existence" by not answering to connection requests.
> If you truly didn't "exist" the last hop *before* your not existing
> machine would send a host unreachable ICMP message. The lack of this
> message shows that something's there.

except if its a cisco device (say, LNS) and has set no ip unreachables 
but that has nasty side affects anyway so most LNS's likely wont be using it

--
Res

"What does Windows have that Linux doesn't?" - One hell of a lot of bugs!