Chris-
I am also interested in the vulnerabilities of DNS to deliberate
pollution. Steve Bellovin has said he will publish a paper on that
later this year. Sure to be a good analysis. I found a garbage root
name-server just the other day, and it got me to thinkin'
I have not seen performance measures for firewalls like Bradner's tests.
For your TIS Gauntlet example I don't imagine the 16bit card is an issue
for links up to T-1. The CPU might be an issue for heavy proxy or
screend work. Can anyone from TIS comment on where the bottleneck shows
up for Gauntlet?
Quentin
|
|
