return-rst on incoming auth connections (should speed things up)

1 files changed, 1 insertions, 1 deletions

diff --git a/share/ipf/firewall.2 b/share/ipf/firewall.2
index db26e7d7667..9a73215748b 100644
--- a/share/ipf/firewall.2
+++ b/share/ipf/firewall.2
@@ -43,7 +43,7 @@ pass in on ppp0 proto udp from any to any port = ntalk
 #  forever timing out.  Don't log ident (auth port) as it's so common.
 #
 block return-rst in log on ppp0 proto tcp from any to any flags S/SA
-block in on ppp0 proto tcp from any to any port = auth flags S/SA
+block return-rst in on ppp0 proto tcp from any to any port = auth flags S/SA
 #
 #  Allow incoming TCP connections to ports between 1024 and 5000, as
 #  these don't have daemons listening but are used by outgoing