Firewall Wizards mailing list archives

Re: Additional TPC/IP stack


From: Jyri Kaljundi <jk () stallion ee>
Date: Sat, 8 Nov 1997 18:51:28 +0200 (EET)

On Wed, 5 Nov 1997, Franco RUGGIERI wrote:

      Do you feel that such additional checking in an ad hoc IP stack is
valuable?

Well Windows NT TCP/IP stack has probably had some security problems (like
wrong reaction to OOB and other packets), and now that Milkyway has
rewritten the whole NT TCP/IP stack for their firewall, at least they have
said that there are other problems with it. So if you can, having a stack
that has been written considering security is certainly better than what
you get with any operating system. This is one thing you have to consider
when choosing a fw product, but certainly having a robust and secure TCP
stack only won't help so much when the OS itself is really buggy.

Jyri Kaljundi
jk () stallion ee
AS Stallion Ltd
http://www.stallion.ee/



Current thread: