I just wanted to ask if somebody knows how does MT ip filter handle fragmented packets ?
Ive tried sending non-initial fragmented packets and they do not match any firewall rule. Are they passed if there is an e.g. accept l3/l4 dpt:80 rule for a destination and drop everything else for that destination and the fragments have the same destination. And what about when there is no firewall rule on the router. If it doesnt match are they dropped or passed by default or is there sort of feature on the ip filter that maintains a table of fragmented packets indexed by source,dst etc.