In some mail from Geoff Mulligan, sie said:
>
> Someone recently said that they didn't know of any firewall that
> maintained state of tcp connections and didn't just rely on the ACK bit
> being set.
>
> SunScreen SPF-100 (hardware/stealth version) has since it's first.
[promo deleted]
Ummm, Geoff, if you confine TCP state to just the connection details then
yes, many firewalls can and do this now.
However, does SunScreen maintain state correctly for the applications using
the TCP stream too ? i.e. will it correctly handle an FTP "PORT" command,
no matter if I send it in 1 packet or 50 ?
Darren
References:
|
|
