nanog mailing list archives

Re: High throughput bgp links using gentoo + stipped kernel


From: Valdis.Kletnieks () vt edu
Date: Sun, 19 May 2013 20:32:55 -0400

On Sun, 19 May 2013 16:42:23 -0700, Seth Mattinen said:
On 5/19/13 4:27 PM, Ben wrote:
Do you actually need stateful filtering?  A lot of people seem to think
that it's important, when really they're accomplishing little from it,
you can block ports etc without it.


I believe PCI compliance requires it, other things like it probably do too.

It's the rare ISP who's border routers are in-scope for PCI compliance.

Attachment: _bin
Description:


Current thread: