[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: tagging & keep state



* Philipp Buehler <[email protected]> [2004-06-02 10:51]:
> On 01/06/2004, Henning Brauer <[email protected]> wrote To [email protected]:
> > > >what, the FAQ suggests to filter stateless if you have multiple 
> > > >interfaces? I have to talk to Joel ;)
> > > *IF* possible, you don't want to have multiple states for the same packet.
> > > Wastes RAM for little purpose.
> > 
> > wrong.
> > 
> > stateful lookups are by magnitudes faster than rule evaluation, and, 
> 
> I think Cedric was talking about non if-bound states; not about
> rule evaluation.
doesn't make sense in any case.
-- 
Henning Brauer, BS Web Services, http://bsws.de
[email protected] - [email protected]
Unix is very simple, but it takes a genius to understand the simplicity.
(Dennis Ritchie)