> Hello There,
>
> Its possible to patch the kernel to not only be resistent to
> teardrop ip frags but also, when the machine has Ip_forwarding compiled
> in, dump these frags instead of passing them along ?
> Sorry if its already this way.
>
Compile with ALWAYS_DEFRAG turned on. You need this for firewalls that
use transparent proxies (you probably always want it on for firewalls
anyway).
cheers,
-bp
-- B. James Phillippe <bryan@Terran.ORG> UNIX, Linux, networks, C, Perl, Java, etc.