>> > > my insights are common sense > > a bad packet which reachs your application can trigger a error in your application > > a packet thrown away by the firewall in front can't > > case closed > Depends on how the app is built. If coded to reject all default, a bad packet which reaches your app just gets ignored.