He was talking to Brad Morgan, who by his own admission does not install kernel updates on his firewall running RH9.<br><br><div class="gmail_quote">On Tue, Jun 23, 2009 at 9:07 AM, Markus Bergholz <span dir="ltr"><<a href="mailto:markuman@gmail.com">markuman@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div>wtf?<br></div><div>of course i do kernel updates on my desktop machine (for new driver support, new features, better performance and security issues!). if you're not, take back your windows machines :-P :)</div>
<div><div></div><div class="h5"><br>
<div class="gmail_quote">On Tue, Jun 23, 2009 at 10:34 AM, Matthias Andree <span dir="ltr"><<a href="mailto:matthias.andree@gmx.de" target="_blank">matthias.andree@gmx.de</a>></span> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Am 23.06.2009, 01:17 Uhr, schrieb Brad Morgan <<a href="mailto:b-morgan@concentric.net" target="_blank">b-morgan@concentric.net</a>>:<br>
<div><div><br>
>> dnsmasq emty his cache after restart, how to prevent it?<br>
><br>
> Isn't the right answer to get dnsmasq off of a machine that isn't<br>
> stable? I have dnsmasq running on a Redhat 9 Linux machine that also<br>
> serves as my<br>
> firewall. There are no kernel updates to worry about and the system just<br>
> runs and runs and runs with uptimes measured in multiple months.<br>
<br>
</div></div>That's something to _STRONGLY_ discourage. Kernel updates aren't required<br>
that often (if you feel they are, run one of the BSDs), and they aren't<br>
the cause for the original posting/pain anyways.<br>
<br>
Running firewalls on outdated kernels is as dangerous as it can get - some<br>
code injection might disable your firewall and then expose your whole LAN.<br>
<br>
--<br>
<font color="#888888">Matthias Andree<br>
</font><div><div><br>
_______________________________________________<br>
Dnsmasq-discuss mailing list<br>
<a href="mailto:Dnsmasq-discuss@lists.thekelleys.org.uk" target="_blank">Dnsmasq-discuss@lists.thekelleys.org.uk</a><br>
<a href="http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss" target="_blank">http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss</a><br>
</div></div></blockquote></div><br><br clear="all"><br></div></div><font color="#888888">-- <br>--------------------------------<br><a href="http://xxx.osuv.de" target="_blank">http://xxx.osuv.de</a><br>icq: 167498924<br>
<br>
</font><br>_______________________________________________<br>
Dnsmasq-discuss mailing list<br>
<a href="mailto:Dnsmasq-discuss@lists.thekelleys.org.uk">Dnsmasq-discuss@lists.thekelleys.org.uk</a><br>
<a href="http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss" target="_blank">http://lists.thekelleys.org.uk/mailman/listinfo/dnsmasq-discuss</a><br>
<br></blockquote></div><br>