Messages in this thread | | | Subject | Re: Firewalling and network resource consumption while under attack | Date | Mon, 21 Sep 1998 18:40:38 -0300 | From | "Brandon S. Allbery KF8NH" <> |
| |
In message <199809211651.JAA01906@Midnight.Hacking.in.the.land.of.Kalifornia. co m>, david writes: +----- | >The firewall drops packets incoming for IP as soon as its proved they are | >valid IP headers and fed them to the firewall. | | Here's an idea. With the below discussion, would it make sense to | regulate inbound packets so as not to consume 99.9% (those two connections | stayed alive :) of the network stack? If inbound packet handling was only +--->8
Why does this start to sound like another aspect of the SA_INTERRUPT / bh discussion?
-- brandon s. allbery [os/2][linux][solaris][japh] allbery@kf8nh.apk.net system administrator [WAY too many hats] allbery@ece.cmu.edu electrical and computer engineering KF8NH carnegie mellon university
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |