Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id ; Sat, 26 Oct 2002 06:39:53 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id ; Sat, 26 Oct 2002 06:39:53 -0400 Received: from mail.hometree.net ([212.34.181.120]:1700 "EHLO mail.hometree.net") by vger.kernel.org with ESMTP id ; Sat, 26 Oct 2002 06:39:51 -0400 To: linux-kernel@vger.kernel.org Path: forge.intermeta.de!not-for-mail From: "Henning P. Schmiedehausen" Newsgroups: hometree.linux.kernel Subject: Re: One for the Security Guru's Date: Sat, 26 Oct 2002 10:46:07 +0000 (UTC) Organization: INTERMETA - Gesellschaft fuer Mehrwertdienste mbH Message-ID: References: <20021026114452.B16359@bitwizard.nl> Reply-To: hps@intermeta.de NNTP-Posting-Host: forge.intermeta.de X-Trace: tangens.hometree.net 1035629167 29653 212.34.181.4 (26 Oct 2002 10:46:07 GMT) X-Complaints-To: news@intermeta.de NNTP-Posting-Date: Sat, 26 Oct 2002 10:46:07 +0000 (UTC) X-Copyright: (C) 1996-2002 Henning Schmiedehausen X-No-Archive: yes X-Newsreader: NN version 6.5.1 (NOV) Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 1159 Lines: 26 Rogier Wolff writes: >On Thu, Oct 24, 2002 at 09:38:46AM +0000, Henning P. Schmiedehausen wrote: >> Get the real thing. Checkpoint. PIX. But that's a little >> more expensive than "xxx firewall based on Linux". >PIX? Is that the one that breaks TCP/IP when an ACK is lost on >the side that the data is coming from? Depends on your PIX OS. As with any other OS, there are bugs and you should monitor the vendor mailing lists for updates and fixes. It did broke SACK once. There was an update and the problem was solved. Thats what a vendor is for. Regards Henning What did you think? That I fall bait to this troll? :-) -- Dipl.-Inf. (Univ.) Henning P. Schmiedehausen -- Geschaeftsfuehrer INTERMETA - Gesellschaft fuer Mehrwertdienste mbH hps@intermeta.de Am Schwabachgrund 22 Fon.: 09131 / 50654-0 info@intermeta.de D-91054 Buckenhof Fax.: 09131 / 50654-20 - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/