This was published in the shorewall-users list ( by Tom ??? )
I think it might be interesting to some of us.

Cheers,
Harry.

----------------------------------------------------------------------------
Shorewall Guy wrote:
> anebi@iguanait.com wrote:
>
> c) I have been experimenting with the ipp2p module in xtables-addons 1.6
> and 1.7; my firewall won't run 5 minutes before crashing if I insert
> just a single ipp2p match rule. YMMV.

Update: xtables-addons 1.8 was released this morning and includes a
buffer underrun fix in xt_ipp2p.c. That, together with the attached
patch, are proving to be more stable on my firewall.
-----------------------------------------------------------------------------

On Sun, 2009-01-11 at 13:56 +0200, Harry Lachanas wrote:
> This was published in the shorewall-users list ( by Tom ??? )
> I think it might be interesting to some of us.
> 
> Cheers,
> Harry.
> 
> ----------------------------------------------------------------------------
> Shorewall Guy wrote:
> > anebi@iguanait.com wrote:
> >
> > c) I have been experimenting with the ipp2p module in xtables-addons 1.6
> > and 1.7; my firewall won't run 5 minutes before crashing if I insert
> > just a single ipp2p match rule. YMMV.
> 
> Update: xtables-addons 1.8 was released this morning and includes a
> buffer underrun fix in xt_ipp2p.c. That, together with the attached
> patch, are proving to be more stable on my firewall.
> -----------------------------------------------------------------------------

Yes, this was interesting, I am just about to revert to old ipp2p kernel
module. Is it ok that .29.1 has old ipp2p and old iptables? I think we
win some time and can test the xtables-addons-1.8 more carefully.

Thanks!

-nc



---
Unsubscribe:  alpine-devel+unsubscribe@lists.alpinelinux.org
Help:         alpine-devel+help@lists.alpinelinux.org
---