On Sat, 1 Oct 2005 12:27:56 -0600 (MDT)
Diana Eichert <[EMAIL PROTECTED]> wrote:

> So Dweeb, what you recommend is upping the state table so we can
> increase the amount of crap that's leaking out from the Windows
> system?  Brilliant, next time there's a Windows worm polluting the
> network I'll just think "Wow, it's not a Windows problem, I just need
> to buy hardware that can handle greater traffic."

Then by this token we should all set a state limit of 1 state per host,
correct, if there's something using more states it must be compromised.
Nice theory. Why not just block the single host causing the problem,
when you have a high state limit, try shell commands to count the states
used every few minutes and then add the excessive hosts to a table,
rather than choke the network. Oh and don't resort to name calling, it
makes the rest of the post look childish, even if there is content of
technical merit.

-- 
Regards, Ed http://www.usenix.org.uk

Reply via email to