11-29-2007 12:27 AM
11-29-2007 06:42 AM - edited 11-29-2007 06:43 AM
11-29-2007 07:12 AM
11-29-2007 07:19 AM
11-29-2007 07:43 AM
11-29-2007 12:04 PM - edited 11-29-2007 12:04 PM
Pawel_Syc wrote:If you unset flow tcp-syn-check, you may pass any packet to create session on a NS box.Even if it is not a SYN packet.If you set flow tcp-syn-check the first packet in the traffic must be SYN, but SYN-ACK from the requested host is not required.Even if you enter 'unset flow no-tcp-seq-check', when the sequence numbers are checked, the described problem occurs.