Search:

Proactive security is not only impractical, but impossible. The two ways of limiting attacks by viruses are by either detecting code which is malicious, or by hooking specific routines in the...

you could introduce a lot of potentially "risky" options.
1) the ability to do "Half-open", FIN/ACK, RST, and other types of scanning methods not detectable by many Network IDS packages.
2)...

I'm confused on a few points.
1) why are you dropping all outgoing connections? Even though you are setting up a firewall,
shouldn't your firewall allow outbound traffic and disallow inbound...