> I'm under the impression that I cannot achieve protection against such
> denial of service attacks with a linux firewall. Please someone with more

You cannot achieve protection against denial of service attacks. You can
only make it very hard ;)

> experience with linux firewalls confirm that or better (of course!): send
> me a pointer, url, whatever to the program that allows me to establish
> such protection. 

The normal linux firewalling is packet filtering, that does mean the end
hosts behind the firewall need some basically sound protocol layers.

You can equally run proxy servers on a Linux box (like squid) that 
make two sets of connections and thus screen your hosts from bad packets.

-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]

Reply via email to