[ previous ] [ next ] [ threads ]
 
 From:  sai <sonicsai at gmail dot com>
 To:  Peter Allgeyer <allgeyer at web dot de>
 Cc:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] Packets blocked for seemingly no reason
 Date:  Mon, 2 May 2005 14:40:57 +0500
On 5/2/05, Peter Allgeyer <allgeyer at web dot de> wrote:
> Am Sonntag, den 01.05.2005, 23:14 -0500 schrieb Zach Lowry:
> > May  1 22:57:57 192.168.0.1 ipmon[130]: 22:57:57.289976 sis1 @0:31 b
> > 192.168.0.2,41262 -> 83.149.110.1,80 PR tcp len 20 52 -AF IN
> 
> This is a blocked IP packet with tcp options set (FIN, ACK). It's surely
> no outgoing _request_. The above tcp packet wants to close a tcp
> connection (or -- more unlikely -- answers to a closing request from 

How do you know that the FIN, ACK are set ? Links to detailed sources
of info would be nice..

TIA 

sai