The manuals warn that long filters may degrade the
PM perfornance. I know that a telnet filter takes only
very few lines, but wouldn't it be more efficient to
implement a technique like existing SNMP access control:
add snmphost reader/writer allowed-host
also for telnet (and of course PMconsole too) ?
Don't know how many telnet connection is a typical PM
making, probably few in a day, and that is not in relation
with millions of packets that must be checked againts the
filter rules.
Thanks,
Vlado
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.
Searchable list archive: <URL:http://www.livingston.com/Tech/archive/>