Re: ECN & cisco firewall

[Andi Kleen]

On Fri, Sep 08, 2000 at 02:56:59AM -0700, David S. Miller wrote:
> That's a really anal, zero purpose, check to put into a firewall.
> I don't know of even any embedded printer stacks that puke when
> the reserved flag bits are non-zero.  The only things this protects
> anyone from are extensions such as ECN :-)

To be fair even older netfilter had the same problem (ipt_unclean would
complain about the reserved bits). It is probably a common bug.  


-Andi

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.tux.org/lkml/