===================================================================
RCS file: /cvsrepo/anoncvs/cvs/www/34.html,v
retrieving revision 1.8
retrieving revision 1.9
diff -u -r1.8 -r1.9
--- www/34.html 2003/09/04 07:17:44 1.8
+++ www/34.html 2003/09/04 08:15:19 1.9
@@ -159,11 +159,11 @@
A large number of bug fixes, changes, and optimizations to our packet filter
including:
-- packet tagging
-
- stateful TCP normalization
-
- passive OS detection
-
- SYN proxy
-
- adaptive state timeouts
+
- packet tagging (e.g. filter on tags added by bridge based on MAC address)
+
- stateful TCP normalization (reassemble tcp, normalize ttl and timeout)
+
- passive OS detection (filter or redirect connections based on source OS)
+
- SYN proxy (protect servers against SYN flood attacks)
+
- adaptive state timeouts (prevent state table overflows under attack)
@@ -481,7 +481,7 @@
alt="OpenBSD">
www@openbsd.org
-$OpenBSD: 34.html,v 1.8 2003/09/04 07:17:44 david Exp $
+$OpenBSD: 34.html,v 1.9 2003/09/04 08:15:19 dhartmei Exp $