* Julien Bordet <[EMAIL PROTECTED]> [2004-03-01 21:35]: > However, when one does bridge traffic shaping, this is not the same thing > at all : proxifying means that your are not bridging any more, using a IP > address for the bridge, and so on. I really think it is a very dirty > solution. The kernel space solution here is much cleaner, as it is > transparent for the firewall administrator.
you are so wrong. doing this kind of proxying in-kernel is just plain wrong, and error-prone. don't people read bugtraq? don't people learn from all the security problems ipf and the linux guys had with their in-kernel proxies? -- Henning Brauer, BS Web Services, http://bsws.de [EMAIL PROTECTED] - [EMAIL PROTECTED] Unix is very simple, but it takes a genius to understand the simplicity. (Dennis Ritchie)
