2.4 Technical tests
- ICMP (ping):
- an echo-reply from the server does not match a connection and is ignored
- an echo-request from the client opens a "connection" for 30s
- any echo-request from the client reinitializes the countdown for 30s
- UDP:
- an UDP packet from the server not matching a connection is ignored
- an UDP packet from the client opens a connection in the state "UNREPLIED" for 30s
- an UDP packet from the client reinitializes the countdown for 30s
- an UDP packet from the server brings the connection in "CONNECTED" state for 180s
- An ICMP port unreachable doesn't close the connection.
- TCP:
- before the client sends a SYN or SYN-FIN : no packet goes through
- a SYN or SYN-FIN packet opens a connection in the state : "SYN_SENT"
- a RST or SYN-RST:
- from the client closes the connection without being transfered
- from the server puts the connection in the state : "CLOSE" for 10 seconds wihout being transfered
- a SYN-ACK from the server puts the connection in the state : "ESTABLISHED". The coutdown is set to 432000 second (5 days)
- any RST or SYN-RST packet immediately closes the connection without being transfered
- a FIN-ACK packet from one of the stations puts the connection in the state "CLOSE_WAIT" for 60s
- a FIN_ACK from the other puts the connection in the state : "TIME WAIT" for 120s
® © Hervé Schauer Consultants 2000 -
4 bis, rue de la gare -
92300 Levallois-Perret
Phone : +33 141 409 700 -
Fax : +33 141 409 709 -
Email : <secretariat@hsc.fr>
Netfilter
