On Fri, 28 Jul 2000, Chris Brenton wrote:
> > Intrusion detection systems are an option
>
> Actually, all this will do is detect the fragment condition. It can not
> help to save your firewall.
It can if it also generates the missing frags so the firewall can reject
the full packet.
Paul
-----------------------------------------------------------------------------
Paul D. Robertson "My statements in this message are personal opinions
[EMAIL PROTECTED] which may have no basis whatsoever in fact."
PSB#9280
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
