High throughput bgp links using gentoo + stipped kernel

Mon May 20 00:32:55 UTC 2013

On Sun, 19 May 2013 16:42:23 -0700, Seth Mattinen said:
> On 5/19/13 4:27 PM, Ben wrote:
> > Do you actually need stateful filtering?  A lot of people seem to think
> > that it's important, when really they're accomplishing little from it,
> > you can block ports etc without it.
>
>
> I believe PCI compliance requires it, other things like it probably do too.

It's the rare ISP who's border routers are in-scope for PCI compliance.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 865 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20130519/31b8988c/attachment.sig>