Hoffmann, Aran wrote:

> The results? Crappy network performance and file transfer timeouts
> but boy were we secure. As soon as we removed the hardening the
> network performance problems went away.

Systematic troubleshooting would have likely solved your timeout
problems. The majority of these keys won't have a lot of / any impact
on normal network performance, all things being equal. Incidentally,
changing some key defaults will not only quote-secure-unquote your
stack, but will also stymie pretty much every TCP-based OS
profiler/fingerprinter around. Which is cool.

--
"It's okay to yell 'fire' in a crowded theater
if the theater is actually on fire."
Tod Beardsley | www.planb-security.net

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]