Hi, * Yaroslav Halchenko <[email protected]> [2010-06-28 12:12]: > doh me -- I let your bug report stay without attention for so long. > Would you think that disabling / advising-against for named filter only > for UDP connections would be sufficient? IP spoofing in TCP is somewhat > elaborate and wider problem, so most of defensive mechanisms could be > said to be weak and prone to DoS, so I would like to prevent going wild > and stating that this filter (and possibly many others) is bogus > entirely, because hypothetically attack still could be crafted.
Yes I agree, should be sufficient. Cheers Nico -- Nico Golde - http://www.ngolde.de - [email protected] - GPG: 0xA0A0AAAA For security reasons, all text in this mail is double-rot13 encrypted.
pgpzi84EG7PYm.pgp
Description: PGP signature
