How to ignore incoming packets

Hi everyone,

I would like diald to ignore any incoming connection attempts.

For example if I get incoming packages to my tcp port 23 (telnet), they
fit the default rule of diald and keep up the line for 2 minutes (keepup
tcp 120 any). I do not have telnetd running on this port and have also
an ipchains packet denying these packets.

Nevertheless these packages match the final catch-all rule of diald and
keep up the line for 2 minutes (keepup tcp 120 any).

On the other hand, I do not want to define a rule like "ignore telnet
packets" because this would also match my own telnet-sessions to remote
telnet servers. 

If it were possible for diald to distinguish between incoming and
outgoing packets one could say somthing like "ignore incoming tcp SYN
packets". Is there something like that?


Joachim