Re: ECN & cisco firewall

From: Alan Cox (alan@lxorguk.ukuu.org.uk)
Date: Fri Sep 08 2000 - 07:10:55 EST


> > the reserved flag bits are non-zero. The only things this protects
> > anyone from are extensions such as ECN :-)
>
> To be fair even older netfilter had the same problem (ipt_unclean would
> complain about the reserved bits). It is probably a common bug.

The current British Standard kitemark for a firewall appears to require the
bug 8)

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
Please read the FAQ at http://www.tux.org/lkml/



This archive was generated by hypermail 2b29 : Fri Sep 15 2000 - 21:00:10 EST