Re: Can a linux firewall protect against SYN flooding (and other attacks)?

[Alan Cox]

> > Seriously, though. Statefulness is the enemy of performance an
> > realiability.
> 
> That is incorrect. It is the enemy of KISS to a certain degree though.

He is right about the performance and reliably as well as forgetting
scaling. There are things you cannot do without firewall state, but being
able to avoid them is generally the best answer

And if you cant avoid them, well make sure your failover is good

-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]