[Openswan Users] Connection not coming up automatically
paul at xelerance.com
Tue Jun 27 22:59:03 CEST 2006
On Tue, 27 Jun 2006, Andy wrote:
> > Is this safe to set nhelpers=0 on all osw boxes?
> IMO, yes.
> I run all mine that way.
Yes it is indeed.
> I'm really not sure how the separate helper process is useful.
It prevents your box from going down with a trivial DDOS attack when
Aggressive Mode is used. It is also used for async hardware offloading.
There are definately issues with nhelpers being non-zero.
More information about the Users