TCP reset attack

A TCP reset attack, also known as a forged TCP reset or spoofed TCP reset, is a way to terminate a TCP connection by sending a forged TCP reset packet. This tampering technique can be used by a firewall or abused by a malicious attacker to interrupt Internet connections.

As of 2025, the Great Firewall of China, Iranian Internet censors, and Indonesian TKPPSE Firewall system are known to use TCP reset attacks to interfere with and block connections as a major method to carry out Internet censorship.^[1]

^ Clayton, Richard; Murdoch, Steven J.; Watson, Robert N. M. (2006). Danezis, George; Golle, Philippe (eds.). Ignoring the Great Firewall of China (PDF). Privacy Enhancing Technologies. Lecture Notes in Computer Science. Vol. 4258. Cambridge, UK: Springer Berlin. pp. 20–35. doi:10.1007/11957454_2. ISBN 978-3-540-68793-1 – via Department of Computer Science and Technology.

[1] Clayton, Richard; Murdoch, Steven J.; Watson, Robert N. M. (2006). Danezis, George; Golle, Philippe (eds.). Ignoring the Great Firewall of China (PDF). Privacy Enhancing Technologies. Lecture Notes in Computer Science. Vol. 4258. Cambridge, UK: Springer Berlin. pp. 20–35. doi:10.1007/11957454_2. ISBN 978-3-540-68793-1 – via Department of Computer Science and Technology.

[1]