Mikael Olsson wrote:
>
> How could you not check offsets if you manage to reassemble the packet?
> Or are you referring to something else?
Agreed, and by the very nature of a proxy this is handled in an
effective manner. What I meant was that there is no easy way to do the
same with SI due to the nature of Inspect.
> Nope, no hablo Inspect.
> (I'm not a fw-1 user) >:-P
Part of the problem and one of my biggest gripes. Doesn't seem like
there is more than 3-5 people who actually have a full grasp of Inspect.
Kind of limits the usefulness of this "feature". ;)
> Ehmm.. Let's kill this thread now :-)
I'll go crawl back under my rock. ;)
<lurk>
Chris
--
**************************************
[EMAIL PROTECTED]
* Mastering Cisco Routers
http://www.amazon.com/exec/obidos/ASIN/078212643X/
* Mastering Network Security
http://www.amazon.com/exec/obidos/ASIN/0782123430/
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
