Re: Can a linux firewall protect against SYN flooding (and otherattacks)?

[Gregory Maxwell]

On Sun, 19 Mar 2000, Lars Marowsky-Bree wrote:

> On 2000-03-19T16:08:21,
>    Gregory Maxwell <[EMAIL PROTECTED]> said:
> 
> > Stateful is evil, begon spawn of the devil!
> > 
> > Seriously, though. Statefulness is the enemy of performance an
> > realiability.
> 
> That is incorrect. It is the enemy of KISS to a certain degree though.
> 
> You will be happy to learn iptables / Netfilter (2.3 / 2.4 filtering
> framework) is stateful.

Now tell me how to use a stateful firewall in a network which requires
zero single-points of failure beyond the endnodes?


-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]