Blocking Incoming Connections

Discussion in 'LnS English Forum' started by nuser, May 31, 2007.

Thread Status:
Not open for further replies.
Page 2 of 2
  1. Climenole

    Climenole Look 'n' Stop Expert

    Joined:
    Jun 3, 2005
    Posts:
    1,637
    Hi all :)

    Contrary to my previous statements this is a more accurate information about these flags combinations:

    ACK-FIN-RST is a normal and legal combination.

    ACK-FIN-URG : status unknown...

    ACK-FIN-SYN: totally abnormal/illegal : it's a variant of syn-fin...


    :)
     
    Climenole, Jun 11, 2007
    #26
  2. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,726
    Location:
    Canada
    "ACK-FIN and ACK-FIN-PSH ... ( two legal combinations)" - Yes, but FIN+RST? I don't believe the two 'was suppose to' be used together.
     
    Phant0m, Jun 11, 2007
    #27
  3. Climenole

    Climenole Look 'n' Stop Expert

    Joined:
    Jun 3, 2005
    Posts:
    1,637
    Hi Phant0m :)

    FIN+RST ? I guess is an abnormal flag combination (as far as I know).

    ACK+RST , ACK+RST+FIN are possible in a normal connection.

    I have here some case of TCP packets with RST only (no ack) from Gmail ...

    One RST from the Gmail server followed by another RST but this time from
    an IP addr in the range 172.*.*.* :eek:


    Have a nice day.

    :)
     
    Climenole, Jun 12, 2007
    #28
  4. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,726
    Location:
    Canada
    I was referring to to FIN+RST accompanied by ACK flag...

    I like to know how you came up with "ACK-FIN-RST is a normal and legal combination.", from an RFC?
     
    Phant0m, Jun 12, 2007
    #29
  5. Climenole

    Climenole Look 'n' Stop Expert

    Joined:
    Jun 3, 2005
    Posts:
    1,637
    Hi Phant0m :)

    I was wrong! ACK+FIN and RST not ACK+FIN+RST in the same packet.

    Like this:
     

    Attached Files:

    Climenole, Jun 12, 2007
    #30
  6. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,726
    Location:
    Canada
    There yea go! :)
     
    Phant0m, Jun 12, 2007
    #31
  7. Climenole

    Climenole Look 'n' Stop Expert

    Joined:
    Jun 3, 2005
    Posts:
    1,637
    Hi Phant0m :)

    :D

    Have a great day Phant0m.

    By the way: I found where the famous "SCOTT" found is idea upon LNS...

    Detail on a new thread...

    :)
     
    Climenole, Jun 12, 2007
    #32
  8. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,726
    Location:
    Canada
    Should be interesting, where's the new thread containing details? :D
     
    Phant0m, Jun 12, 2007
    #33
  9. Climenole

    Climenole Look 'n' Stop Expert

    Joined:
    Jun 3, 2005
    Posts:
    1,637
    Hi Phant0m :)


    Actually it is the same guy : Scott's new letter and now Scoot Finnie in Computerworld (with the same st00pid comments about sounds...)

    :D
     
    Climenole, Jun 12, 2007
    #34
Page 2 of 2
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...