>  It depends on how much information you want to tell the user, but it
>would be nice to be able to specify which kind of denied you want to
>send. 

exactly my thinking...

>  The advantage of port unreachable is that it makes it the same as if
>you didn't have that service enabled.

yep.  but since i "foresaw" other "requirements" i left that part sort
of open in my ioctl code.  currently it has a switch handling 0, which
means "accept the connection", and the default case sends (will send)
the reset packet.  it would be trivial to add more cases...

-- 
|-----< "CODE WARRIOR" >-----|
andrew@echonyc.com (TheMan)        * "ah!  i see you have the internet
codewarrior@daemon.org                               that goes *ping*!"
warfare@graffiti.com      * "information is power -- share the wealth."