Re: Can a linux firewall protect against SYN flooding (and otherattacks)?

[Christopher E. Brown]

        Lets not confuse the issue here (no mixing terms).


        Filtering Firewall
        (Stateful Filtering) Firewall
        Proxy Firewall


        Cannot be interchanged...

Unfort, the PIX is basicly a semi-transparent Proxy Firewall that does
all sorts of evil magic.


A stateful router is bad, a stateful router that breaks the
traffic if it gets re-routed is worse.


A stateless router with filtering is *good*.    (Linux 1.2.x - 2.2.x, 
Cisco, etc...)

A stateless router with stateful filtering is *better*. (Linux 2.4.x)



---
As folks might have suspected, not much survives except roaches, 
and they don't carry large enough packets fast enough...
        --About the Internet and nuclear war.


-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]