I’ve setup a firewall (ROS 3.0 rc10) and I can see a lot of packets being dropped that appears to belong to connections that I consider being “legal” i.e. connections to/from non-blocked ports, initiated by a user on the LAN side of the router.
For instance, if I open a newspaper webpage, I can see in Torch a number of connections are established as the page is being loaded.
However, shortly thereafter I can see that a burst of packets are rejected in the firewall due to Connection State=Invalid.
From previous discussions I understand that this is due to rather strict definition of connection “lifetime” in ROS.
As so many packets are lost because they are considered invalid, doesn’t this indicate that ROS requirements are too strict?
What kind of information is it that is sent from a webserver too late to be considered valid, and won’t this cause vital information to be lost?
I don’t have the knowledge nor experience to conclude, I’m just asking questions, and I would be thankful if somebody could shed some light on this.
I find it strange that perfectly “legal” traffic shall be blocked.