karl and paul, expostulating

Paul Traina pst at jnx.com
Wed Mar 5 23:17:26 UTC 1997


[back from the grave]

paul at vix.com (Paul A Vixie) writes:
> Filtering packets based on source address makes Ciscos go way slow on 
> every packet.  Filtering based on destination address makes Ciscos go
> very fast on most packets and a little slower on SYN-ACKs.

While I agree with what you're trying to do, your statement about filtering
packets on source addresses is not correct.  It's exactly the same hit.

Paul
-- 
The streets will flow with the blood of non-believers.






More information about the NANOG mailing list