Re: how to determine whether a firewall is stateful or just a simple packet filter?

[Jose Nazario <jose () biocserver BIOC cwru edu>]

On Tue, 12 Mar 2002, ???? wrote:

> how to determine whether a firewall is stateful or just a simple
> packet filter? because of job ,I am eager to make clear of it. I will
> be very appreciate if someone can tell me.

quite simple, really: you can send 'response' packets to stimuli that
never were sent (ie a SYN-ACK) and watch for a response from the target
(ie a RST).

____________________________
jose nazario                                                 jose () cwru edu
                     PGP: 89 B0 81 DA 5B FD 7E 00  99 C3 B2 CD 48 A0 07 80
                                       PGP key ID 0xFD37F4E5 (pgp.mit.edu)

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards