From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <gentoo-user+bounces-147850-garchives=archives.gentoo.org@lists.gentoo.org>
Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80])
	by finch.gentoo.org (Postfix) with ESMTP id 8D5CF1381F3
	for <garchives@archives.gentoo.org>; Wed, 22 May 2013 00:16:31 +0000 (UTC)
Received: from pigeon.gentoo.org (localhost [127.0.0.1])
	by pigeon.gentoo.org (Postfix) with SMTP id 7A13BE0823;
	Wed, 22 May 2013 00:16:21 +0000 (UTC)
Received: from mail-oa0-f48.google.com (mail-oa0-f48.google.com [209.85.219.48])
	(using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
	(No client certificate requested)
	by pigeon.gentoo.org (Postfix) with ESMTPS id 5C5FCE081B
	for <gentoo-user@lists.gentoo.org>; Wed, 22 May 2013 00:16:20 +0000 (UTC)
Received: by mail-oa0-f48.google.com with SMTP id i4so1692399oah.35
        for <gentoo-user@lists.gentoo.org>; Tue, 21 May 2013 17:16:19 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        bh=zXHhlUsECx84FwCKgoAVBDiVABRXZJkbXXvGuKGHkyM=;
        b=gie4niWj167GaWxlMX1K55EUw8Wd/ZEqOMRm5RE7J2GkZzVHQHbjwvA3ve6GtjfPlo
         1othYIwOJkqAD1KPSEG7uxae6IXDXI+AakeMUfGUAbndLUGgzssGActBx+/vXGDuy1Ql
         LFy8dyBBySb4fwqA7Uf7Y57u36g/ia90iWvsJHduxZNO+D31s6g9gCgI9DoLPZlGv7rD
         PKTOtSwpoTKDiLo51dqOeKB3Z9gRtaSVqkoGU6CGaWNd5ygiMXnn8W3Hbf7XGmQKfSPR
         po8TWZ47HiBHECipZdAQLcEpveS4HQ2R9k01PIw6zlEM2bHuO6iw5Tz9m+kL8c9zfJ0R
         RHHg==
Precedence: bulk
List-Post: <mailto:gentoo-user@lists.gentoo.org>
List-Help: <mailto:gentoo-user+help@lists.gentoo.org>
List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org>
List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org>
List-Id: Gentoo Linux mail <gentoo-user.gentoo.org>
X-BeenThere: gentoo-user@lists.gentoo.org
Reply-to: gentoo-user@lists.gentoo.org
MIME-Version: 1.0
X-Received: by 10.182.45.197 with SMTP id p5mr3006786obm.92.1369181779507;
 Tue, 21 May 2013 17:16:19 -0700 (PDT)
Received: by 10.60.60.161 with HTTP; Tue, 21 May 2013 17:16:19 -0700 (PDT)
In-Reply-To: <CAJ0EP43Fj4a8Pk+3k+=cT6FE-nmy70R+h0q-GenwAaBN6kHz9w@mail.gmail.com>
References: <201305211211.53740.neal.p.murphy@alum.wpi.edu>
	<CAGWRaZZYJ40WTHPqbK2nO+i_iT82iS_OBf=qCyiRBr0B1CFjiA@mail.gmail.com>
	<CAGWRaZYxDajKK3GNhjuLkta7OTpDmzgEFKMNihV1ZWDsvBQtLg@mail.gmail.com>
	<CAJ0EP43Fj4a8Pk+3k+=cT6FE-nmy70R+h0q-GenwAaBN6kHz9w@mail.gmail.com>
Date: Wed, 22 May 2013 10:16:19 +1000
Message-ID: <CAC=wYCEs6rkR5ch4rsumJKj9Kg5e+j_LEr__9SmTHh2qQASKYw@mail.gmail.com>
Subject: Re: [gentoo-user] Re: IPTables - Going Stateless
From: Adam Carter <adamcarter3@gmail.com>
To: "gentoo-user@lists.gentoo.org" <gentoo-user@lists.gentoo.org>
Content-Type: multipart/alternative; boundary=047d7b67637a99bee704dd4379eb
X-Archives-Salt: e59fcab7-12a1-49cc-8bbd-0dcd58e2b03e
X-Archives-Hash: 9709f88e70da5cabe8ce12940e97ca25

--047d7b67637a99bee704dd4379eb
Content-Type: text/plain; charset=ISO-8859-1

Anyone advocating stateless firewalls in 2013 deserves scrutiny. I would be
asking for some evidence there is a performance issue, and that the best
solution to the problem is to turn off stateful inspection.

--047d7b67637a99bee704dd4379eb
Content-Type: text/html; charset=ISO-8859-1

<div dir="ltr">Anyone advocating stateless firewalls in 2013 deserves scrutiny. I would be asking for some evidence there is a performance issue, and that the best solution to the problem is to turn off stateful inspection.<br>
</div>

--047d7b67637a99bee704dd4379eb--