It says nothing at all. The problem with trying to stop a DoS is that once
the packets are getting to you, it is too late. A DoS can be done in a
number of ways, one of which is simply overloading your internet connection.
To stop this kind of DoS, the packets must be stopped before they come down
the line to you. That requires your ISPs intervention, and your firewall
has no impact on that problem.
Also, BIGGEST != BEST.
Randy Graham
--
You're kind of trying to pick between "horible disaster" and "attrocious
disaster" -- Paul D. Robertson (on VNC vs. PPTP)
http://www.theregister.co.uk/content/2/19442.html - Mankind's greatest
invention?
> -----Original Message-----
> From: Zachary Uram [mailto:[EMAIL PROTECTED]]
> Sent: Friday, June 08, 2001 12:35 AM
> To: patrick kerry
> Cc: Barry George; [EMAIL PROTECTED]
> Subject: Re: ICMP packets and Firebox II
>
>
> thanks for info on this threa, patrick et al.
> if the biggest player in firewall business fails what does that
> say about state of the industry and the future? eek!
>
> zach
>
> On Thu, 7 Jun 2001, patrick kerry wrote:
> >
> > Checkpoint, the leading firewall in the industry has
> > attempted to develop their software (SYNDEFENDER) to
> > stop DOS attacks and in real world tests it failed
> > miserably.
>
> [EMAIL PROTECTED]
> "Blessed are those who have not seen and yet have faith." - John 20:29
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
>
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
