Re: [PATCH][BUG] Retransmission of "SYN+ACK" does'nt work

[Alan Cox]

> BTW in this case "fair" resource allocation is possible.
> F.e. for defragmenter you could use SFQ-like scheme. It is cheap
> and mighty. Even true fair queue based on destiantion IP address
> is possible in the case of "always defrag". And it really defends against DoS.

It is also possible to hack RED to give roughly the right approach although
opening a DoS against the client (which is common to most 'fair' algorithms)
when they spoof the source address.

You just drop _every_ queued packet from the address matching the packet
you zapped with RED


-
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to [EMAIL PROTECTED]