Firewall Wizards mailing list archives

Re: COmpare Firewalls


From: Robert Graham <robert_david_graham () yahoo com>
Date: Fri, 10 Sep 1999 17:43:25 -0700 (PDT)

--- Darren Reed <darrenr () reed wattle id au> wrote:
Doesn't the fact that the various Microsoft products all seem to have
problems with fragmentation ring any bells in people's heads about *bad*
IP implementation ?  Seems to me like they push the defragmentation *up*
a layer (probably for some perceived speed advantage) and in doing so
have created the `same' problem in each of your TCP, UDP, ICMP, IGMP, etc,
rather than just once in IP.

Linus chose a monolithic kernel over a layered kernel. I don't begrudge
Microsoft making the same choices with its TCP/IP stack. I'm at a complete loss
as too why this bug should appear, but I wouldn't call this a "bad"
implementation. I've got a design in my head for a wicked-fast caching
web-server that combines a TCP-stack with the HTTP protocol in a monolithic
module, so I can see lots of reasons why Microsoft would want to do similar
things.




===
Robert Graham
"Anxiously awaiting the millenium so I can start programming
dates with 2-digits again."
__________________________________________________
Do You Yahoo!?
Bid and sell for free at http://auctions.yahoo.com



Current thread: