Re: new client connection server thinks is already established !

This is a discussion on Re: new client connection server thinks is already established ! within the IPFilter forums, part of the System Security and Security Related category; On Tue, 5 Feb 2008, Jefferson Ogata wrote: > It wouldn't just be for that problem; it would be ...


Go Back   Usenet Forums > System Security and Security Related > IPFilter

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 02-06-2008
Paul B. Henson
 
Posts: n/a
Default Re: new client connection server thinks is already established !

On Tue, 5 Feb 2008, Jefferson Ogata wrote:

> It wouldn't just be for that problem; it would be for all stale
> connections. If you aren't using return-rst, every time you lose state
> information because of a reboot (for example), any box that didn't get a
> TCP teardown thinks it still has a live connection to the box. Using
> return-rst clears that up at the next window probe. Without return-rst,
> those connections end up hanging around until the keepalive timers kill
> them. This is wasteful and provides no benefit.


Hmm, you make a good point -- I hadn't considered the generic issue.

Thanks...


--
Paul B. Henson | (909) 979-6361 | http://www.csupomona.edu/~henson/
Operating Systems and Network Analyst | henson@csupomona.edu
California State Polytechnic University | Pomona CA 91768
Reply With Quote
Reply


Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 07:10 PM.


Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0