version 1.8, 2003/09/04 07:17:44 |
version 1.9, 2003/09/04 08:15:19 |
|
|
<li>A large number of bug fixes, changes, and optimizations to our packet filter |
<li>A large number of bug fixes, changes, and optimizations to our packet filter |
including: |
including: |
<ul> |
<ul> |
<li>packet tagging |
<li>packet tagging (e.g. filter on tags added by bridge based on MAC address) |
<li>stateful TCP normalization |
<li>stateful TCP normalization (reassemble tcp, normalize ttl and timeout) |
<li>passive OS detection |
<li>passive OS detection (filter or redirect connections based on source OS) |
<li>SYN proxy |
<li>SYN proxy (protect servers against SYN flood attacks) |
<li>adaptive state timeouts |
<li>adaptive state timeouts (prevent state table overflows under attack) |
</ul> |
</ul> |
<p> |
<p> |
|
|