Yes, quite interesting.

Now, try getting your webhost to ignore those reset packets... and aviod the inevitable DoS attack at the same time...

And I KNOW (secondhand, but still...) they don't filter based on stateless packet content alone. Encrypted pages with certain content get blocked as well.