[Sidewinder] SYN/ACK issue

Sidewinder moderated discussion list sidewinder at adeptech.com
Tue Jul 29 12:14:44 EDT 2008


I expect that the problem was that folks had active TCP sessions "in flight"
already.  The new filter doesn't know about those sessions, so it is
expecting a SYN packet, but sees the ACK from the already existing sessions.

> ...  However, when we implement this rule the logs explode with
> entries saying "Expected SYN, Got ACK" - Once this rule is implemented
> everyone is dumped off the IRC server even though there is another IP
filter
> rule that we placed below that one which allows for all TCP ports.  I've

JRJ


More information about the Sidewinder mailing list