R. B. Riddick napsal/wrote, On 11/11/06 20:00:
But I was scared, not undertstand what the established bit did, &
how easily an attacker might fake something, etc.
...
Should I still be worrying about established ?
Hmm... I personally use "check-states" and "keep-state", so that it is not
Statefull rules can stop the sophisticated intruder, but are often more
vulnerable to DoS attacks.
Every method has pros and cons ...
Dan
--
Dan Lukes SISAL MFF UK
AKA: [EMAIL PROTECTED], [EMAIL PROTECTED],[EMAIL PROTECTED]
_______________________________________________
freebsd-security@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
