[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Firewalls in service provider environments

Subject: Firewalls in service provider environments
From: morrowc.lists at gmail.com (Christopher Morrow)
Date: Wed, 8 Feb 2012 10:01:33 -0500
In-reply-to: <[email protected]>
References: <[email protected]> <[email protected]> <[email protected]> <CAP-guGVcXmY0hGYqrgFvEStxCqBxN=A3c84U7OTuBcpZ_GxzUQ@mail.gmail.com> <[email protected]> <CAALUyuRJ4pob=97fk=ph39ey3zvpbNC4COtzMBaeOai+LfDGxw@mail.gmail.com> <[email protected]>

On Wed, Feb 8, 2012 at 9:25 AM, Matthew Reath <matt at mattreath.com> wrote:

> Good point. Adding in an established entry, although may open you up for
> TCP/SYN sort of packets is a better trade off than affecting customer
> traffic.

'established' is explicitly NOT 'syn' ...
maybe you meant 'ack flood' ? (or rst flood? or .... but certainly not
syn flood)

Follow-Ups:
- Firewalls in service provider environments
  - From: matt at mattreath.com (Matthew Reath)

References:
- Firewalls in service provider environments
  - From: matt at mattreath.com (Matthew Reath)
- Firewalls in service provider environments
  - From: leigh.porter at ukbroadband.com (Leigh Porter)
- Firewalls in service provider environments
  - From: matt at mattreath.com (Matthew Reath)
- Firewalls in service provider environments
  - From: bill at herrin.us (William Herrin)
- Firewalls in service provider environments
  - From: matt at mattreath.com (Matthew Reath)
- Firewalls in service provider environments
  - From: matt at overloaded.net (Matt Buford)
- Firewalls in service provider environments
  - From: matt at mattreath.com (Matthew Reath)

Prev by Date: Firewalls in service provider environments
Next by Date: UDP port 80 DDoS attack
Previous by thread: Firewalls in service provider environments
Next by thread: Firewalls in service provider environments
Index(es):
- Date
- Thread