4 ms·
I don't get how this is an issue with the firewall. If the firewall wasn't there tossing away packets with invalid sequence numbers, then the actual host would
by papsosouid 14y ago
I don't get how this is an issue with the firewall. If the firewall wasn't there tossing away packets with invalid sequence numbers, then the actual host would toss them away anyhow right? So what's the difference having the firewall there or not? Either way you can figure out the sequence number by trying until you guess right.
- JoachimSchipper 14y agoYes, the host would toss drop/reject them anyway. However, having the firewall allows you to find the valid number in all_numbers / something + something (where "something" is as in the grandparent) by first using the firewall to find the correct interval ([0, something[, [something, 2 * something[, ...) and then bruteforcing only those sequence numbers.