Re: [nznog] Stateful firewalls

Thinking about this further, let me say one word, "China". NAT upon NAT already being done, and firewalling to the extreme. -----Original Message----- "It is not uncommon to see transparent but stateful firewalls in ISPs (without NATs) today - to avoid DoS attacks. These firewalls do a job similar to SPNATs. What is the state maintenance and processing overhead in these firewall deployments? Can we reuse any lessons from them?"