Re: [PLUG] fire wall question(s)

[LeRoy Cressy <leroy@lrcressy.com>]

"Gleeson, Francis (HT-EX)" wrote:


So I guess the main point would be that a firewall is tightly 
integrated with the kernel and can therefore kill the packet
much sooner than would happen otherwise. By the time a server 
daemon get the packet it has been al the way through the protocol
stack.

This statement is very true since the firewalling code is compiled into
the kernel.  Thus the packets that are destined to be dropped are
destroyed before any of the other processes that might be listening for
them.  Thus when your firewall drops a packet it happens before init and
any of the sub processes.  

-- 
Rev. LeRoy D. Cressy   mailto:lcressy@telocity.com   /\_/\
                       http://www.netaxs.com/~ldc   ( o.o )
                       Phone:  215-535-4037          > ^ <

Jesus saith unto him, I am the way, the truth, and the life: 
no man cometh unto the Father, but by me. (John 14:6)

______________________________________________________________________
Philadelphia Linux Users Group       -      http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion  -  http://lists.phillylinux.org/mail/listinfo/plug