Firewall question

HI

I have 2 ROS VM’s connecting work to the internet.

I have some asym traffic flows, the internet being the internet.

I want to filter out invalid packets, but I don’t want to stop TCP packets that are not part of a know connection..

so the tcp session might start coming in on 1 interface of ROS A but because of issues it might start flowing in another interface on ROS B.

ROS B doesn’t have a connection seen, it never saw the SYN packet.

I presume it still creates a connection in con tracking, but how does it treat the first packet it sees, especially with regards to invalid.

Think i answered my own question

invalid checks the connection table…