On Tue, 23 Jan 2001, Bernd Eckenfels wrote:
> On Mon, Jan 22, 2001 at 11:15:53PM -0500, Michael H. Warfield wrote:
> > SPF provides some stateful inspection for IPChains, but I would
> > really recommend upgrading to Netfilter for full connection tracking and
> > stateful inspection.
>
> Please don't confuse a stateful packet filter with "stateful inspection".
> The later is more than keeping track of connection state accross ip packets,
> it also looks inside the packets to do content based ACLs.
To what degree though is the packet inspection?
Thanks,
Ron DuFresne
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
"Cutting the space budget really restores my faith in humanity. It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation." -- Johnny Hart
***testing, only testing, and damn good at it too!***
OK, so you're a Ph.D. Just don't touch anything.
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
