Richard Stiennon writes:
Check out the elegant solution just announced by Checkpoint:
This is a firewall solution. I like the psuedo-NAT done to adjust sequence
I'm not fond of this class of solution. I'll also point out that it
appears that kernel fixes almost completely alleviate the problem.