IP Filter implementation

• IP Filter takes the seq/ack/window values into account

• But did it in the wrong way

• Seen on various firewalls (hanging connections)

• Reason: wrong assumption that packets seen by filter host will also be seen by the final destination

Notes: