Messages in this thread |  | | Date | Mon, 16 Jun 2008 17:03:06 +0930 | From | David Newall <> | Subject | Re: Feedback on TCP: Make TCP_RTO_MAX a variable |
| |
Stephen Hemminger wrote: > On Mon, 16 Jun 2008 06:27:35 +0930 > David Newall <davidn@davidnewall.com> wrote: > >> ... caused by floods of packets directed towards the internet >> link at one end or the other > Why are you letting them through. Use proper firewalling. >
They didn't get through the router. These floods congested the border links (devices).
> A real VPN with IPSEC would have stopped the problem. >
No, it wouldn't. If you don't see this, ask and I'll explain, again.
> I wouldn't put a mission critical system exposed directly to the Internet. >
I didn't. Standard NAT appliances protect all ends.
|  |