|
Firewalls (May 1996) |
> > > > And I don't know any packet filter solution that can stop stealth scanning. > All that needs to happen for this to come into effect is expanding the fields > used in packet filtering to include ack/seq numbers plus window size. Wouldn't you need to retain state about the ack/seq numbers to do this meaningfully?
|