Re: RST's and ACK's and stealth scans

From: darrenrat_private
Date: Sat May 02 1998 - 23:07:59 PDT

  • Next message: HSKarim: "Re: RST's and ACK's and stealth scans"

    In some email I received from HSKarim, sie wrote:
    > 
    > 2. Can I assume that when My firewall sends RST that the packet reveals
    > nothing more than the fact that the connection was refused,whether the ACK bit
    > is set or not?
    
    That all depends on the various code paths through the kernel and how they
    fill in or copy values into the TCP header.
    
    > 3. If RST was sent and window size is 0 (ACK or no ACK) I conclude that my
    > firewall really does not want to talk... Is this a correct conclusion?
    
    No.
    



    This archive was generated by hypermail 2b30 : Fri Apr 13 2001 - 12:58:19 PDT