[nycbug-talk] home grown firewall solutions ...

[alex at pilosoft.com]

On Sat, 11 Mar 2006, Aleksandar Kacanski wrote:

> Thank you for your response. I happened to worry about DDOS so I am
> looking for something to offload. Still I like when someone comfirm that
> FBSD+PF is not rocket science to setup... /s
if you worry about ddos, do not use freebsd or linux - both use 
route-cache-like-things for packet forwarding. That means, performance in 
best case (no ddos) is good, performance in worst case (ddos, lots of 
small flows) is horrid.

-alex