On Sat, 31 May 2003, terry white wrote:

> : Which kernel would be best? 2.0.x, 2.2.x, or 2.4.x?
>
>     i would suggest the 2.2.25 kernel.  it's stable, runs like a champ,
> and at this point in time, pretty secure.  the 2.4.x kernel has just seen
> a security problem up-to-and-including 2.4.20.  the suggested fix for
> that is the latest 'release-candidtae'.  on a production machine, i don't
> think so.

While I agree with your sentiment of having to update the kernel in the 2.4.x
series, I will point out that if you want stateful packet inspection you
simply don't have a choice.  PNAT under 2.2.x doesn't do stateful packet
inspection at all.

        --Arthur Corliss
          Bolverk's Lair -- http://arthur.corlissfamily.org/
          Digital Mages -- http://www.digitalmages.com/
          "Live Free or Die, the Only Way to Live" -- NH State Motto

Reply via email to