lkml.org 
[lkml]   [2008]   [Jun]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Feedback on TCP: Make TCP_RTO_MAX a variable
Stephen Hemminger wrote:
> On Mon, 16 Jun 2008 06:27:35 +0930
> David Newall <davidn@davidnewall.com> wrote:
>
>> ... caused by floods of packets directed towards the internet
>> link at one end or the other
> Why are you letting them through. Use proper firewalling.
>

They didn't get through the router. These floods congested the border
links (devices).

> A real VPN with IPSEC would have stopped the problem.
>

No, it wouldn't. If you don't see this, ask and I'll explain, again.


> I wouldn't put a mission critical system exposed directly to the Internet.
>

I didn't. Standard NAT appliances protect all ends.


\
 
 \ /
  Last update: 2008-06-16 09:37    [W:0.097 / U:0.552 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site