Hi, On Tue, 06.03.2007 at 12:40:07 +0100, Almir Karic <[EMAIL PROTECTED]> wrote: > On 3/5/07, Toni Mueller <[EMAIL PROTECTED]> wrote: > >it depends. My current impression is that if you can get away with > >having the TCP stack reject packets w/o spending the effort of running > >it through pf, than that's a performance benefit. But I'm not sure that > >the person asking will be in such a situation. > > if someone sent you a packet they already wasted your bandwidth, so > the only thing you gain is minor performance benefit as the services > in question aren't wasting your RAM.
I only intended to make a statement about the load on the gateway. Sure, they wasted my bandwidth, but not my gateway's horsepower yet. Best, --Toni++
