|
Firewalls (May 1994) |
SGI currently runs a tunnelling mrouted, configured so that packets with TTLs less than 32 will not be transmitted to the mbone (see threshold). Since no TCP services can be accessed via multicast, and since our machines cannot unicast back to sources, we deemed the risk to be acceptable. It's conceivable that someone could develop a kiss of death packet for some udp service. -- Eliot Lear [lear @ sgi . com] References:
|