Hi to all, I badly need some help with this one.. I wanted to know what happens when a stateful firewall receives a SYN packet from client A and the next packet received by the firewall is not the SYN/ACK packet from server B but rather the first data packet for the same connection from server B. Let's assume that the SYN/ACK, the ACK and the first data request packet arrived to their respective destinations through some other route. Is the connection considered as ESTABLISHED at that point on the firewall, which has seen traffic in both directions? If the answer to the above is no, would the connection be considered as ESTABLISHED if the default behaviour of ip_conntrack was used? Any input will be very much appreciated.. Warm regards, Visham
