>- If we received a SYN, and the connection attempt appears to come from
>  itself, send an RST, since it cannot possibly be valid.

it would actually be possible to do this legitimately with nonblocking
connect calls, no?  or is it simply assumed to be invalid since "who
in the world would do such a thing?"

the tcpip stack has things like SO_REUSEADDR and SO_REUSEPORT that
would make this easier, and if a process forked after calling bind and
tried to connect back to itself (again, why?), wouldn't that
accomplish a legitimate connection?

cf: http://www.kohala.com/~rstevens/torek.94dec31.txt

-- 
|-----< "CODE WARRIOR" >-----|
andrew@echonyc.com (TheMan)        * "ah!  i see you have the internet
codewarrior@daemon.org                               that goes *ping*!"
warfare@graffiti.com      * "information is power -- share the wealth."