[lkml]   [1998]   [Sep]   [21]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
Messages in this thread
SubjectRe: Firewalling and network resource consumption while under attack
> If a firewall rule is in place to drop the packet on the floor, should
> those packets still be allowed to consume the entire network stack?
> Shouldn't there be a bit reserved for the communications that are already
> in place?

The firewall drops packets incoming for IP as soon as its proved they are
valid IP headers and fed them to the firewall.

> stalled after that. Of the six running connections I had (all ssh) all
> but two of them stalled.

That sounds like someone ran out of bandwidth. You are describing classic
capture effect . How much do you know about your providers bandwidth 8)


To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to
Please read the FAQ at

 \ /
  Last update: 2005-03-22 13:44    [W:0.074 / U:0.868 seconds]
©2003-2018 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site