4 ms·
Why for the love of God does the firewall not send the RST when it drops the connection?
by jandrese 5y ago
Why for the love of God does the firewall not send the RST when it drops the connection?
- lmz 5y agoBecause what usually happens is the connection is just forgotten from the NAT table. Both sides still see it as connected but the middle box will no longer forward any packets.
- jandrese 5y agoIt doesn’t just “fall off” the NAT table. Some process in the firewall chose that entry in the NAT table to drop at that moment. It could use the entries from that NAT table to construct RST packets to both sides of the connection. This should be easy and obvious.