Port scans when connecting to IRC

[Starfury_2260]

I'm wondering if I should just add the server that does the port scan when I'm connecting to IRC to a rule allowing it access? Right now I have to set sygatePF to allow all to connect to IRC. Is there any reason not to put it in a rule?

[muno]

What happens when you connect to an irc server, is that the server scans your ip for open proxy/whatever. It will most likely kline you if you do have an open server.

It should work fine either way (assuming you don't have an open proxy server)

[Starfury_2260]

well if i dont allow it to do it (and just let sygate block it) then it takes a long time to connect, so i just set up rule to allow it.

[muno]

Some servers are also asking for ident, and most firewalls just drop the ident requests (don't reply 'no, I don't have ident' nor 'yeah, I do have iden't).
So, the server waits and waits for the ident response which of course never comes. That can increase connection time significantly.

[John Prophet]

what port #?

port 113?

http://grc.com/port_113.htm