THUS SPAKE smartin @
ca (Steve Martin):
# I am therefore thinking of tossing all incoming IP packets that do not
# have an IP header length of 5 words. This means that I will be tossing all
# packets that contain options. Is there a problem with this? From what I've read,
I find that only exotic things, the kinds you don't want, have ip_hl != 5.
You should do fine like that.
(However there is a TCP header option (not ip header options)
that happens on most TCP streams -- the Max Segment Size option.)