behave-06----Page:3
1  2  3  4  5  6  7 

RST Behavior
Issue:
External interface sees inbound SYN on unbound port
Typical OS responds with RST
NAT responding with RST means simultaneous-open doesn’t work

Recommendation:
Silent treatment of such inbound SYNs
Many (> 64%) NATs already demonstrate this behavior

PPT Version