Search:

imho it is a *very bad idea* to discount the script kid O's. A real hacker may root your box and have a look around or whatever. Script Kiddies are a lot more likely to rm -rf your box or other...

DROP is the way to go. Deny is not really a bad sign to a hacker, if there is some script O' nastie that he has for `well known port' such and such then he can go about beating up your firewall.
...