K 10 svn:author V 4 csgr K 8 svn:date V 27 1999-08-18T15:40:05.000000Z K 7 svn:log V 298 Slight tweak to tcp.blackhole to add optional behaviour to drop any segment arriving at a closed port. tcp.blackhole=1 - only drop SYN without RST tcp.blackhole=2 - drop everything without RST tcp.blackhole=0 - always send RST - default behaviour This confuses nmap -sF or -sX or -sN quite badly. END