>
> Thanks to all who replied, very helpful. I'm going to test tonight.
>
> While we're on the topic, I remember reading that it is less
> taxing on the router to apply the lists to IN on the interface. Is
> this the more common approach? Comments?
>
WRT Cisco routers, my understanding has been that OUTbound filters
are less taxing because the router can make the decision concurrently
while moving the packet from the inbound to the outbound buffer,
while inbound filters require the packet to be held on the
inbound buffer until decision is made.
It's my current understanding that with fast-switching in
play on almost all products, this is no longer a real
concern.
--
W.C. Epperson "I have great faith in fools.
Chief of Systems Engineering Self-confidence, my friends call it."
Security Officer Emeritus --Edgar Allen Poe--
Curmudgeon-for-Life
Virginia Dept. of Education
[EMAIL PROTECTED]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
