Re: Proxy 2.0 secure? (IDS)

[tqbf () pobox com]

> make your firewall do the packet reassembly, leave your IDS in passive
> monitoring so that it does not become the object of an attack.

If you implemented this right (and that's not easy), you might solve the
fragmentation problem. Now solve the TCP stream reassembly problem.

-----------------------------------------------------------------------------
Thomas H. Ptacek                           SNI Labs, Network Associates, Inc.
-----------------------------------------------------------------------------
http://www.pobox.com/~tqbf       "If you're so special, why aren't you dead?"