Messages in this thread | | | Subject | Re: RFC2385 (MD5 signature in TCP packets) support | Date | Sat, 16 Mar 2002 01:43:05 +0000 (GMT) | From | Alan Cox <> |
| |
> >Another solution could involve a netfilter module to mangle > >the packets. > > The problem is that this is intended to be used on machines that are routing > very high volumes of packets on multiple FEs. So the implementation would
Dave's suggestion is netfilter - and netfilter is fast enough I think. You only need filters on stuff you have already decided is for your IP too. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |