Hi All, If an attacker send tcp Syn to me, If my box respond automaticaly tcp Reset, How firestorm alarm me ? Possible ? and other, If an attacker send udp to me, and my box respond automaticaly icmp port unreachable, How firestorm alarm me ? Possible ? because other nids not alarm with tcp syn or udp request ... Regard. PS: Sorry for my bad English.