Re: ip options

[Roland Dobbins <rdobbins () arbor net>]

On Oct 29, 2009, at 2:05 AM, Luca Tosolini wrote:

> Considering the security hazard that they imply, I am therefore  
> thinking
> to drop them.

You should certainly consider the impact on traceroute and possibly  
QoS (i.e., RSVP, if it's relevant) in your environment.

Some vendors/platforms also have the option to ignore, rather than drop.

-----------------------------------------------------------------------
Roland Dobbins <rdobbins () arbor net> // <http://www.arbornetworks.com>

Sorry, sometimes I mistake your existential crises for technical
insights.

                        -- xkcd #625