* Florin Andrei <florin@andrei.myip.org> [2007-10-17 00:16]:
quoted text
> HOLY SH*T! I tried 4.2. It rocks!
>
> Just the first test that I tried after installing it:
> - switched gigabit network
> - web server behind 1:1 NATing firewall
> - firewall is AMD64 X2 2.4GHz
> - downloading 2GB file via HTTP through the firewall in infinite loop
> - flooding the firewall with small UDP packets, random source IPs, 
> generated as fast as my workstation (AMD64 X2 6400, Intel Pro/1000 PCI 
> Express card, Linux Fedora 7, running the kernel-level "pktgen" packet 
> generator which is very fast) can crank them out. The packets are directed 
> to the NATed address of the web server, to a port that's blocked by the 
> firewall.
>
> Under these conditions, OpenBSD 4.1 as a firewall just keels over and dies. 
> All traffic through the firewall just stops in an instant.
> Linux 2.6.18 fares slightly better, the current download finishes up, but 
> another one won't start.
>
> But the default OpenBSD 4.2 i386 uniprocessor kernel doesn't seem to care. 

lovely :)

-- 
Henning Brauer, hb@bsws.de, henning@openbsd.org
BS Web Services, http://bsws.de
Full-Service ISP - Secure Hosting, Mail and DNS Services
Dedicated Servers, Rootservers, Application Hosting - Hamburg & Amsterdam