In the example above, ProxySG sends a TCP SYN to fd00::123:226:b9ff:fe84:cb1. fd00::123:226:b9ff:fe84:cb1 responded with a TCP SYN-ACK. However, at the IPv6 layer, a Fragment Header with no additional fragments is sent along.
Even though RFC2460 does not explicitly state a single packet with fragmentation header should be allowed or denied, SG treats it as an invalid fragment header. Hence, the packet is dropped.
Imported Document ID: 000032959
Subscribing will provide email updates when this Article is updated. Login is required.