Michel Banguerski wrote: [....] > > BTW: I'm not 100% sure but it seems to me that at least inversion 4.1 > Checkpoint FW1 was rejecting by default packets with *ANY* TCP > option , and people were "happy" with that :-) > (of course vendors lasyness is ont a good reason for doing bad design) > Ooops ! It was *IP* options, not *TCP*. I'm sorry, plz don't falme ...
Regards Michel