nanog mailing list archives

Re: ECN, DNS and Firewalls


From: valdis.kletnieks () vt edu
Date: Thu, 27 Dec 2018 22:49:53 -0500

On Fri, 28 Dec 2018 13:35:04 +1100, Mark Andrews said:
There are major operators that still have STUPID firewall settings
in front of DNS servers that drop SYN packets with ECE and CWR set
17 years after ECN was specified.

Time to name-n-shame?


Current thread: