On 08/15/08 11:28, Stephen Isard wrote:
This is a large university department where students and visitors use the lan. The computing officers are highly competent and doing their best to provide security, but, as you know, it's a constant battle.
Sounds like it is time to divide the different access networks up in to smaller pieces and route between them. Make sure that you do some sanity checking (filtering) as part of the routing process too. Try to help prevent spoofing as close to the edge as possible. ;)
This particular case involves udp.
*nod*
Thanks for your advice.
You are welcome. Grant. . . . -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
