On Sun, 2 Oct 2005, Henrik Nordstrom wrote: > I am not entirely sure about the reasoning why a lone FIN is seen as > invalid. The comment only says "Too late and no reason to do anything...". > Also not entirely sure why a lone RST is seen as invalid. Both FIN and RST > carries valuable meaning when resuming forgotten sessions. If a FIN receives which does not belong to any existing connection in the conntrack table, which state should we assign to the "new" connection "established" by the FIN? Was it the first FIN (half-closed session) or the second FIN from the other direction? I dunno how a lone RST could signal to pick up a connection. Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary