search for: brent_chapman_packet_filtering

...tt.com/dist/internet_security/ipext.ps.Z 2. A Weekness in the 4.2 BSD Unix TCP/IP Software -- R.T. Morris then of AT&T ftp://research.att.com/dist/internet_security/117.ps.Z *3.* Network (In)Security Through IP Packet Filtering -- D. Brent Chapman ftp://coast.cs.purdue.edu/pub/doc/firewalls/Brent_Chapman_packet_filtering.ps.Z [mod: I just scanned this article, and it has some good advise. It also overstresses that some features "would be nice". Those are standard on Linux. Also section 2.4.4 (fragments) is "outdated". On Linux you say "always defrag" and the problems raised are solved...