On 22 Jun 2011, at 09:38, Deena Awate wrote:
> Does the message that is displayed in the browser not depend on the value that I return from the IP filter NKE.
No, it does not, because you're working at the IP layer. At the IP layer you can only choose to either forward the packet or not. If you forward the packet, the connection goes through, if it don't, the connection will eventually time out.
You have a number of choices here:
A. You can synthesise a connection reset. The browser will then promptly display a "connection refused" message. This is probably an improvement, but it's probably not the best
UI.
B. You can move up to the socket layer, at which point the error returned by your socket filter will be seen by the browser. It's still likely to display an unhelpful message though.
C. You can synthesise a redirect to a page that displays an explanation of what's going wrong.
Option C is probably your best choice UI-wise.
Note that combining these options may be your best choice. For example, it would be easier to implement option C if you moved up to the socket layer (option B).
S+E
--
Quinn "The Eskimo!" <
http://www.apple.com/developer/>
Apple Developer Relations, Developer Technical Support, Core OS/Hardware
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing
Do not post admin requests to the list. They will be ignored.
Macnetworkprog mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden