From: Ray Leach <raymondl@knowledgefactory.co.za>
To: Netfilter Mailing List <netfilter@lists.netfilter.org>
Subject: Re: lots of ACK/FIN filtering (DPT=80) at web server.
Date: 29 May 2003 07:25:38 +0200 [thread overview]
Message-ID: <1054185938.13730.183.camel@raylinux.internal> (raw)
In-Reply-To: <Sea1-F98nnh99RhOQmI000379a3@hotmail.com>
[-- Attachment #1: Type: text/plain, Size: 1417 bytes --]
Hi there
On Wed, 2003-05-28 at 10:46, SB CH wrote:
> Hello, all.
>
> I have operated linux web server and executed iptables 1.2.8.
>
> and I have found so lots of logs like this ACK,FIN filtering.
> Surely, ACK-FIN is a connection closing step, so there is no problem for
> customers but I would like to know why this happens!!
> I guess that the timeout of the connection tracking related.
>
Those are 'broken' browsers that do not follow the http standard
properly.
>
> May 25 12:33:05 www kernel: IN=eth0 OUT= SRC=210.126.xxx.xx
> DST=211.10.xx.xx LEN=40 TOS=0x00 PREC=0x00 TTL=118 ID=3376 DF PROTO=TCP
> SPT=3608 DPT=80 WINDOW=63520 RES=0x00 ACK FIN URGP=0
>
> Do you have any problems like me?
Yes
> and what's the problem and how can I solve this problem?
>
Stop using non-standards complient browsers. Sometimes changes to
standards are not 'enhancements'.
>
> Thanks in advance for your kind opinios!!
>
> _________________________________________________________________
> 확인하자. 오늘의 운세 무료 사주, 궁합, 작명, 전생 가이드
> http://www.msn.co.kr/fortune/default.asp
--
--
Raymond Leach <raymondl@knowledgefactory.co.za>
Network Support Specialist
http://www.knowledgefactory.co.za
"lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import"
Key fingerprint = 7209 A695 9EE0 E971 A9AD 00EE 8757 EE47 F06F FB28
--
[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]
next prev parent reply other threads:[~2003-05-29 5:25 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-05-28 8:46 lots of ACK/FIN filtering (DPT=80) at web server SB CH
2003-05-29 5:25 ` Ray Leach [this message]
2003-05-29 10:11 ` Pascal Italiaander
-- strict thread matches above, loose matches on Subject: below --
2003-05-29 8:46 SB CH
2003-05-29 9:17 SB CH
2003-05-29 9:30 ` Ray Leach
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1054185938.13730.183.camel@raylinux.internal \
--to=raymondl@knowledgefactory.co.za \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.