Re: Firewalling and network resource consumption while under attack
Brandon S. Allbery KF8NH (allbery@kf8nh.apk.net)
Mon, 21 Sep 1998 18:40:38 -0300
In message <199809211651.JAA01906@Midnight.Hacking.in.the.land.of.Kalifornia.
co
m>, david writes:
+-----
| >The firewall drops packets incoming for IP as soon as its proved they are
| >valid IP headers and fed them to the firewall.
|
| Here's an idea. With the below discussion, would it make sense to
| regulate inbound packets so as not to consume 99.9% (those two connections
| stayed alive :) of the network stack? If inbound packet handling was only
+--->8
Why does this start to sound like another aspect of the SA_INTERRUPT / bh
discussion?
--
brandon s. allbery [os/2][linux][solaris][japh] allbery@kf8nh.apk.net
system administrator [WAY too many hats] allbery@ece.cmu.edu
electrical and computer engineering KF8NH
carnegie mellon university
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/