|
|
|
|
|
|
|
|
|
|
xen-devel
Re: [Xen-devel] Re: network-bridge script reworked
On Thu, Oct 20, 2005 at 10:36:39AM -0700, Nivedita Singhvi wrote:
> Ewan Mellor wrote:
>
> >>>antispoof=${antispoof:-no}
> >>
> >>Just a reminder to fix this inconsistency. The default should probably be
> >>yes (unless there is some reason why antispoof doesn't work?)
>
> Er, antispoofing was causing quite a significant degradation
> in performance (long ago), and there are quite a few people
> who were thus interested in keeping it off.
Performance degradation due to a few iptables rules? Really?
I still think that it ought to default to 'on', because that's the safer
option. Propellor-heads always have the option to turn it off in the config
file.
Ewan.
_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel
|
|
|
|
|