Re: Feedback on TCP: Make TCP_RTO_MAX a variable

[David Newall]

Stephen Hemminger wrote:
> On Mon, 16 Jun 2008 06:27:35 +0930
> David Newall <davidn@xxxxxxxxxxxxxxx> wrote:
>   
>> ... caused by floods of packets directed towards the internet
>> link at one end or the other
> Why are you letting them through. Use proper firewalling.
>   

They didn't get through the router.  These floods congested the border
links (devices).

> A real VPN with IPSEC would have stopped the problem.
>   

No, it wouldn't.  If you don't see this, ask and I'll explain, again.


> I wouldn't put a mission critical system exposed directly to the Internet.
>   

I didn't.  Standard NAT appliances protect all ends.
--
To unsubscribe from this list: send the line "unsubscribe linux-net" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html