[Full-Disclosure] IETF Draft - Fix for TCP vulnerability (fwd)

[Mike Silbersack]

On Thu, 22 Apr 2004, Darren Reed wrote:

> > 1.  RSTs exactly at last_ack_sent (always accepted)
>
> To pursue this thought further, if a FIN has been sent or received
> (connection has migrated from ESTABLISHED to CLOSE_WAIT or something
> else) then receiving an RST at this point should be much less of a
> problem, yes ?
>
> The only drawback is I've seen sessions where there's a last ditch
> attempt to get data through even though a FIN has been received.
>
> Darren

Are you suggesting that we use the strict check during the ESTABLISHED
phase, and the window-wide check during all other phases?

Mike "Silby" Silbersack