Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > Network Security: Firewall, NAT, QoS, IPS and more
Reload this Page Protocol handling
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 03-10-2010, 02:12 PM
Alvin's Avatar
Senior Member
  
Join Date: Jul 2003
Posts: 240
Default Protocol handling
Enable TCP Window scaling [UNchecked]
Use strict TCP session handling [Checked]
Validate packet length [STRICT]

The default is Unchecked for all if I recall correctly.

Is the above the most secure setting?

Just trying to Maximize all the settings and learn along the way.
__________________
Astaro Latest Version, HP ML110 G3 Server, P4HT 3.0GHz , (02 x 512MB, 02 x 1GB = 3GB RAM), 01 x Broadcom Corporation NetXtreme BCM5721 Gigabit Ethernet PCI Express Build in, 02 x Broadcom Corporation NetXtreme BCM5705_2 Gigabit Ethernet Add On Card.
Reply With Quote
  #2 (permalink)  
Old 03-10-2010, 05:22 PM
Moderator
  
Join Date: Jul 2001
Location: southern California
Posts: 5,359
Default
Most secure, yes.
Also highest chance of problems with applications.

If you're running public webservers you probably don't want strict TCP sessions; a lot of browsers and http servers take shortcuts with TCP sessions, which will slow down your site and fill up Astaro's logs.

Barry
__________________
http://DealBert.net
Home & business end-user since v1.x
  • ASL 6.3x, HP DL145 Dual Opteron, 1GB RAM, 6 gigE NICs, 50-IP Platinum License
  • ASL 7.5x, HP DL360G5, Xeon 5160, 3GB, RAID, gigE NICs, 50-IP Platinum License
  • ASL 7.5x, 17-watt fanless mini-ITX system: MSI IM-945GSE-A Atom n270, 2GB RAM, Morex T3310 case. 2 Intel GigE, 3 VLANs. 80G 5200rpm 2.5" HD
    Netgear GS108T gigE VLAN switch & Linksys WRT54G WAP
    Total network infrastructure: 27 watts. 100-IP Home User. FiOS 10mb/2mb
Reply With Quote
  #3 (permalink)  
Old 03-10-2010, 05:37 PM
Alvin's Avatar
Senior Member
  
Join Date: Jul 2003
Posts: 240
Default
BarryG

I am not running any servers thus should leave it ON.

Enable TCP Window scaling, should I enable it ?

I read the help file about transport protocols, I use a cable modem, no idea does that apply to me.
__________________
Astaro Latest Version, HP ML110 G3 Server, P4HT 3.0GHz , (02 x 512MB, 02 x 1GB = 3GB RAM), 01 x Broadcom Corporation NetXtreme BCM5721 Gigabit Ethernet PCI Express Build in, 02 x Broadcom Corporation NetXtreme BCM5705_2 Gigabit Ethernet Add On Card.
Reply With Quote
Reply

« Previous Thread | Next Thread »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT. The time now is 03:14 AM.

 
Contact Us - Astaro User Bulletin Board - Archive - Top

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.