* Philipp Buehler <[EMAIL PROTECTED]> [2004-06-02 10:51]: > On 01/06/2004, Henning Brauer <[EMAIL PROTECTED]> wrote To [EMAIL PROTECTED]: > > > >what, the FAQ suggests to filter stateless if you have multiple > > > >interfaces? I have to talk to Joel ;) > > > *IF* possible, you don't want to have multiple states for the same packet. > > > Wastes RAM for little purpose. > > > > wrong. > > > > stateful lookups are by magnitudes faster than rule evaluation, and, > > I think Cedric was talking about non if-bound states; not about > rule evaluation.
doesn't make sense in any case. -- Henning Brauer, BS Web Services, http://bsws.de [EMAIL PROTECTED] - [EMAIL PROTECTED] Unix is very simple, but it takes a genius to understand the simplicity. (Dennis Ritchie)
