It would be interesting to test but how would you know that it is reassembling the packet before forwarding it???
-PaulK
*********************************************
Paul Keser
Network Security Engineer
[EMAIL PROTECTED]
tel: 415.351.4037
fax: 415.474.6017
ShopExpert.com
1375 Sutter Street, Suite 400
San Francisco, CA 94109
*********************************************
> -----Original Message-----
> From: Lance Spitzner [mailto:[EMAIL PROTECTED]]
> Sent: Monday, May 22, 2000 10:05 AM
> To: Paul Keser
> Cc: 'paul jones'; [EMAIL PROTECTED]
> Subject: RE: [FW1] IP Fragment Reassembly
>
>
>
> On Mon, 22 May 2000, Paul Keser wrote:
>
> > I don't know if FW1 will pass already fragmented packets
> but I have seen it
> > fragment packets when the additional overhead of encryption
> caused large
> > packets to be larger than the max MTU for ethernet.
>
> I believe FW-1 reassembles fragmented packets, inspects them, and then
> forward the packets in their original fragmented state. I
> have not tested
> this, but sounds like a fun project :)
>
> lance
>
>
>
> ==============================================================
> ==================
> To unsubscribe from this mailing list, please see the
> instructions at
> http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
>
