Subject: Re: [PATCH] TCP: add option for silent port knocking with integrity protection

From: Andi Kleen <[email-masked]>
Date: Thu, 12 Dec 2013 02:23:17 +0100

> ... and then do the same for the first TCP packet with payload? And you

That gets passed through by the firewall rule.

> seriously would consider that "safer" or "less error prone", starting

Yes the risk of adding exploitable holes to the kernel is signficantly
lower.

-Andi