[lkml]   [2008]   [Jun]   [16]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Feedback on TCP: Make TCP_RTO_MAX a variable
Stephen Hemminger wrote:
> On Mon, 16 Jun 2008 06:27:35 +0930
> David Newall <> wrote:
>> ... caused by floods of packets directed towards the internet
>> link at one end or the other
> Why are you letting them through. Use proper firewalling.

They didn't get through the router. These floods congested the border
links (devices).

> A real VPN with IPSEC would have stopped the problem.

No, it wouldn't. If you don't see this, ask and I'll explain, again.

> I wouldn't put a mission critical system exposed directly to the Internet.

I didn't. Standard NAT appliances protect all ends.

 \ /
  Last update: 2008-06-16 09:37    [W:1.063 / U:0.888 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site