Drop, don’t reject possibly malicious inbound connections

Brock, of Bash Cures Cancer, brings up an good networking practive that I’ve never touched on here. It is pretty standard fare for firewall guys, but it’s still not standard for ever OS out of the box. So if you’re running a linux or BSD firewall you might check out how you’ve got it set up.

Dropping the traffic instead of rejecting it costs the spammers/hackers more resources and saves you a tiny bit too. Here’s the original post.