[FW1] DoS question

[Alan.Trevillion@bankofamerica.com]

I just wanted to clarify a few facts on how Firewall 3.0b, patch 3064 deals with
state connection tables.
I have just read Lance's excellent white paper on how it works, but just need to
be sure on a few things.

Am I right in saying that if you send an ACK to or through the Firewall, it
checks that state connection table first and if it is NOT there, it then checks
the rulebase, then if allowed it adds the packet to it's table ?

If so, does it check the reverse order of the rule ? ,
 i.e. If you have a rule where A can talk to B, if you send an ACK from B to A
will it accept it and add it to it's table with the default TCP time-out ?

Thanks in advance

Alan Trevillion

Bank of America
Internet LAN/WAN Group




================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================