Inappropriate TCP Resets Considered Harmful

Metadata

Publisher: IETF
Doc Type: Best Practice
Pages: 19
Abstract: This document is being written because there are a number of firewalls in the Internet that inappropriately reset a TCP connection upon receiving certain TCP SYN packets, in particular, packets with flags set in the Reserved field of the TCP header. In this document we argue that this practice is not conformant with TCP standards, and is an inappropriate overloading of the semantics of the TCP reset. We also consider the longer-term consequences of this and similar actions as obstacles to the evolution of the Internet infrastructure.
Publication Date: 2002-08-01
Status Note: Best Current Practice
DOI: 10.17487/RFC3360
Link: https://doi.org/10.17487/RFC3360
Author(s): Sally Floyd
Keyword(s): TCP

Latest version of IETF RFC 3360

Document Versions — IETF RFC 3360

▶ IETF RFC 3360 (2002-08-01)

THIS DOC [ACTIVE] [LATEST VERSION]

Normative Reference(s)

IETF RFC 793 [Superseded*]
IETF RFC 1122 [Active*]
IETF RFC 1812 [Active*]
IETF RFC 2026 [Active*]
IETF RFC 2481 [Superseded*]
IETF RFC 2873 [Superseded*]
IETF RFC 2979 [Active*]
IETF RFC 3168 [Active*]

Bibliographic Reference(s)

"The ECN Web Page", URL " http://www.icir.org/floyd/ecn.html ". EXTERNAL
Jitendra Padhye and Sally Floyd, Identifying the TCP Behavior of Web Servers, SIGCOMM, August 2001. URL " http://www.icir.org/tbit/ ". EXTERNAL
ECN-under-Linux Unofficial Vendor Support Page, URL " http://gtf.org/garzik/ecn/ ". EXTERNAL
Dax Kelson, note sent to the Linux kernel mailing list, September 10, 2000. EXTERNAL
Bellovin, S., "A "Reason" Field for ICMP "Administratively Prohibited" Messages", Work in Progress. EXTERNAL
Scott Courtney, Why Can't My 2.4 Kernel See Some Web Sites?, Enterprise Linux Today, Apr 17, 2001. URL " http://eltoday.com/article.php3?ltsn=2001-04-17-001-14- PS ". EXTERNAL
Toby Miller, Intrusion Detection Level Analysis of Nmap and Queso, August 30, 2000. URL " http://www.securityfocus.com/infocus/1225 ". EXTERNAL
Sally Floyd, Negotiating ECN-Capability in a TCP connection, October 2, 2000, email to the end2end-interest mailing list. URL " http://www.icir.org/floyd/papers/ECN.Oct2000.txt ". EXTERNAL
FreeBSD ipfw Filtering Evasion Vulnerability, Security Focus Online, January 23, 2001. URL " http://www.securityfocus.com/bid/2293 ". EXTERNAL
Stevens, W., "TCP/IP Illustrated, Volume 1: The Protocols", Addison-Wesley, 1994. EXTERNAL

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/RFC3360.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

IETF RFC 3360, Inappropriate TCP Resets Considered Harmful. Available at https://doi.org/10.17487/RFC3360

Snippet:

IETF RFC 3360, Inappropriate TCP Resets Considered Harmful. Available at https://doi.org/10.17487/RFC3360

HTML (ISO 690 compliant)

Preview:

IETF RFC 3360, Inappropriate TCP Resets Considered Harmful. Available at https://doi.org/10.17487/RFC3360

Snippet:

<span class="citation"><cite>IETF RFC 3360</cite>, Inappropriate TCP Resets Considered Harmful. Available at <a href="https://doi.org/10.17487/RFC3360" target="_blank" rel="noopener">https://doi.org/10.17487/RFC3360</a></span>

SMPTE's HTML Pub

Preview:

IETF RFC 3360, Inappropriate TCP Resets Considered Harmful
doi: 10.17487/RFC3360
url: https://doi.org/10.17487/RFC3360

Snippet:

<li>
<cite id="bib-rfc3360">IETF RFC 3360</cite>, Inappropriate TCP Resets Considered Harmful
<span class="doi">10.17487/RFC3360</span>
</li>

Referenced By

IETF RFC 3871 [Active*]
IETF RFC 4340 [Active*]