Re: ECN & cisco firewall

[Alan Cox]

> > the reserved flag bits are non-zero.  The only things this protects
> > anyone from are extensions such as ECN :-)
> 
> To be fair even older netfilter had the same problem (ipt_unclean would
> complain about the reserved bits). It is probably a common bug.  

The current British Standard kitemark for a firewall appears to require the
bug 8)

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to [EMAIL PROTECTED]
Please read the FAQ at http://www.tux.org/lkml/