Re: Can a linux firewall protect against SYN flooding (and other attacks)?

[Lars Marowsky-Bree]

On 2000-03-19T19:53:58,
   Gregory Maxwell <[EMAIL PROTECTED]> said:

> Now tell me how to use a stateful firewall in a network which requires
> zero single-points of failure beyond the endnodes?

In such a case, you can't use a real firewall, because a real firewall doesn't
rely on packet filtering only, but includes an application level gateway.

For SPF, the hot-failover can be solved at least, and last I heard we are
working on it.

Application proxy failover involves TCP/IP and application state and is
currently not planned for Linux, for all I know.

So the answer is: Use the right tool for the job. In your situation, you can't
go for "maximum" security.

Sincerely,
    Lars Marowsky-Br�e <[EMAIL PROTECTED]>
    Development HA

-- 
Perfection is our goal, excellence will be tolerated. -- J. Yahl

-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]