Re: [Xen-devel] Re: network-bridge script reworked

[Ewan Mellor <ewan@xxxxxxxxxxxxx>]

On Thu, Oct 20, 2005 at 10:36:39AM -0700, Nivedita Singhvi wrote:

> Ewan Mellor wrote:
> 
> >>>antispoof=${antispoof:-no}
> >>
> >>Just a reminder to fix this inconsistency. The default should probably be
> >>yes (unless there is some reason why antispoof doesn't work?)
> 
> Er, antispoofing was causing quite a significant degradation
> in performance (long ago), and there are quite a few people
> who were thus interested in keeping it off.

Performance degradation due to a few iptables rules?  Really?

I still think that it ought to default to 'on', because that's the safer
option.  Propellor-heads always have the option to turn it off in the config
file.

Ewan.

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-devel