Messages in this thread | | | Date | Wed, 14 Feb 2001 13:00:51 -0800 | From | "H. Peter Anvin" <> | Subject | Re: ECN for servers ? |
| |
Jeff Garzik wrote: > > On 14 Feb 2001, H. Peter Anvin wrote: > > By author: Petru Paler <ppetru@ppetru.net> > > > What is the impact of enabling ECN on the server side ? I mean, will > > > any clients (with broken firewalls) be affected if a SMTP/HTTP server > > > has ECN enabled ? > > > Pro: better behaviour in presence of network congestion. > > > > Con: people behind broken firewalls can't connect. > > Since you can use ICMP to tunnel data, a lot of security ppl are > reluctant to stop filtering ICMP :/ >
You can use DNS to tunnel data, too. As far as ICMP is concerned, perhaps they should consider sterilizing approaches instead.
-hp
-- <hpa@transmeta.com> at work, <hpa@zytor.com> in private! "Unix gives you enough rope to shoot yourself in the foot." http://www.zytor.com/~hpa/puzzle.txt - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |