Solved

Is the tcp "options" header always preserved over switches, routers, & firewalls?

Posted on 2008-10-16
1
268 Views
Last Modified: 2013-11-29
I want to make use of the TCP "options" header (see http://www.freesoft.org/CIE/Course/Section4/8.htm) in an application.  Is the tcp "options" header always preserved over switches, routers, & firewalls?
0
Comment
Question by:Juzzam2
1 Comment
 
LVL 4

Accepted Solution

by:
larsga earned 250 total points
ID: 22743318
Are you asking about putting un-standardised data in the header? If you diverge from the already standardised option types, you risk getting into problems with devices that do more than just simple forwarding of the packets.

A switch or a simple router will not alter or drop the tcp options header. They don't even look at, or care, about what is in this header.

Firewalls / intrusion detection/prevention systems / home broadband routers doing NAT and other more complex network devices might look at this header and drop or alter what is there if they do not understand the contents. Even with well documented tcp option types, there have been many examples of firewalls/NAT etc that got it wrong and caused problems.

See RFC 2780: http://www.ietf.org/rfc/rfc2780.txt
"Security analyzers such as firewalls and network intrusion detection monitors often rely on unambiguous interpretations of the fields described in this memo.  As new values for the fields are assigned, existing security analyzers that do not understand the new values may fail, resulting in either loss of connectivity if the analyzer declines to forward the unrecognized traffic, or loss of security if it does forward the traffic and the new values are used as part of an attack."
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
configuring snmp v2 or v3 on Cisco switches 2 55
Strange addresses from DHCP 8 91
Windows Service to Receive TCP Packets 4 145
No RSTP between switches 3 61
Network ports are the threads that hold network communication together. They are an essential part of networking that can be easily ignore or misunderstood, my goals is to show those who don't have a strong network foundation how network ports opera…
Configuring network clients can be a chore, especially if there are a large number of them or a lot of itinerant users.  DHCP dynamically manages this process, much to the relief of users and administrators alike!
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question