Bugtraq mailing list archives

Re: Digital FW2.0 question

From: alan () lxorguk ukuu org uk (Alan Cox)
Date: Wed, 27 Nov 1996 19:40:29 +0000

Why does dec enable ipforwarding and ipgatewaying in a firewall
configuration with disabled "transparent proxies" ?


The screend daemon is a module change that bounces all the network
packets into user space and back out via screend. In effect ip forwarding
has an extra yes/no/maybe bounce via user space.

Is there a weakness in the screend or networking code regarding ip
frags ?
The box seems to get slower when sending many ip frags to it.


Screend does bounce via user. I don't know what the performance implications
are.

Alan

Current thread:

Re: Futile rexecd holes, (continued)
- - - Re: Futile rexecd holes Jon Peatfield (Nov 22)
    - Administratrivia Aleph One (Nov 22)
    - Administratrivia Scriptors of DOOM (Nov 23)
    - A Stupid script. Efrain Torres (Nov 22)
    - A Stupid script. Aleph One (Nov 24)
    - AIX lquerypv Aleph One (Nov 25)
    - lquerypv fix Troy Bollinger (Nov 25)
    - Security Problems in XMCD David J. Meltzer (Nov 25)
    - FreeBSD Security Advisory: FreeBSD-SA-96:18.lpr FreeBSD Security Officer (Nov 25)
    - Digital FW2.0 question Peter Dieth (Nov 26)
    - Re: Digital FW2.0 question Alan Cox (Nov 27)
    - Re: FreeBSD Security Advisory: FreeBSD-SA-96:18.lpr Warner Losh (Nov 26)
    - XMCD v2.1 released (was: Security Problems in XMCD) Xmcd Admin (Nov 25)
    - Security Problems in XMCD 2.1 David J. Meltzer (Nov 26)
    - Re: Security Problems in XMCD 2.1 Theo Van Dinter (Nov 26)
    - Re: Security Problems in XMCD 2.1 Jim Dennis (Nov 26)
    - Re: Security Problems in XMCD 2.1 Alan Cox (Nov 27)
    - Administratriva Aleph One (Nov 26)
    - A security issue of a different kind. Alan Brown (Nov 26)
    - BOOTP/DHCP security itudps (Nov 26)
    - Re: BOOTP/DHCP security Alan Cox (Nov 27)

(Thread continues...)