In message <20040903042924.GB3684@bcd.geek.com.au>, Daniel Carosone writes:
>
>--vGgW1X5XWziG23Ko
>Content-Type: text/plain; charset=us-ascii
>Content-Disposition: inline
>
>On Fri, Sep 03, 2004 at 04:18:10AM +0000, Steven M. Bellovin wrote:
>
>> Don't try and add a state session if the packet has already been checked
>> and marked as out of window - trying to do the add will result in a failure
>> and the packet being blocked, incorrectly.
>
>Hooray!

Thank Darren, not me.  He got it working on my machine, so we did the 
commit from my machine.

		--Steve Bellovin, http://www.research.att.com/~smb