First page Back Continue Last page Summary Graphics
IP Filter implementation
IP Filter takes the seq/ack/window values into account
But did it in the wrong way
Seen on various firewalls (hanging connections)
Reason: wrong assumption that packets seen by filter host will also be seen by the final destination
Notes: