* Re: "unclean" ?bug? with dell dns
[not found] ` <20020828132419.GC21410@morinfr.org>
@ 2002-09-09 18:27 ` Rainer Ellinger
2002-09-09 20:40 ` Guillaume Morin
2002-09-09 20:40 ` Jozsef Kadlecsik
0 siblings, 2 replies; 4+ messages in thread
From: Rainer Ellinger @ 2002-09-09 18:27 UTC (permalink / raw)
To: Guillaume Morin, Yannick Le Saint; +Cc: netfilter
Guillaume Morin wrote:
> > When i "dig www.euro.dell.com", i get in syslog :
> I'd say that unclean matches the packet because of a checksum
> mismatch. There must be a buggy router between you and the server.
I ran into the same problem and can also confirm that this is a problem
with dell's nameserver or a system on dell's side. Further
investigation with ethereal showed that matching pakets had their udp
crc set to 0x0000. My questions are:
Should this condition really considered harmful and matched by unclean?
Why is there no corresponding log message from the unclean module?
--
rainer@ellinger.de
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: "unclean" ?bug? with dell dns
2002-09-09 18:27 ` "unclean" ?bug? with dell dns Rainer Ellinger
@ 2002-09-09 20:40 ` Guillaume Morin
2002-09-09 20:40 ` Jozsef Kadlecsik
1 sibling, 0 replies; 4+ messages in thread
From: Guillaume Morin @ 2002-09-09 20:40 UTC (permalink / raw)
To: Rainer Ellinger; +Cc: Yannick Le Saint, netfilter
Hi Rainer,
Dans un message du 09 sep à 20:27, Rainer Ellinger écrivait :
> investigation with ethereal showed that matching pakets had their udp
> crc set to 0x0000. My questions are:
>
> Should this condition really considered harmful and matched by unclean?
No, that's a bug. I'll submit a patch for that.
> Why is there no corresponding log message from the unclean module?
The consensus is that for a simple checksum error a log message is not
needed.
Regards,
--
Guillaume Morin <guillaume@morinfr.org>
Justice is lost, Justice is raped, Justice is done. (Metallica)
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: "unclean" ?bug? with dell dns
2002-09-09 18:27 ` "unclean" ?bug? with dell dns Rainer Ellinger
@ 2002-09-09 20:40 ` Jozsef Kadlecsik
2002-09-09 20:40 ` Jozsef Kadlecsik
1 sibling, 0 replies; 4+ messages in thread
From: Jozsef Kadlecsik @ 2002-09-09 20:40 UTC (permalink / raw)
To: Rainer Ellinger
Cc: Guillaume Morin, Yannick Le Saint, netfilter, netfilter-devel
On Mon, 9 Sep 2002, Rainer Ellinger wrote:
> Guillaume Morin wrote:
> > > When i "dig www.euro.dell.com", i get in syslog :
> > I'd say that unclean matches the packet because of a checksum
> > mismatch. There must be a buggy router between you and the server.
>
> I ran into the same problem and can also confirm that this is a problem
> with dell's nameserver or a system on dell's side. Further
> investigation with ethereal showed that matching pakets had their udp
> crc set to 0x0000. My questions are:
>
> Should this condition really considered harmful and matched by unclean?
I don't think so. UDP checksumming is not mandatory, but the unclean
module accepts only packets with valid checksums.
> Why is there no corresponding log message from the unclean module?
Because the unclean module does not log packets with invalid checksums.
Regards,
Jozsef
-
E-mail : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
H-1525 Budapest 114, POB. 49, Hungary
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: "unclean" ?bug? with dell dns
@ 2002-09-09 20:40 ` Jozsef Kadlecsik
0 siblings, 0 replies; 4+ messages in thread
From: Jozsef Kadlecsik @ 2002-09-09 20:40 UTC (permalink / raw)
To: Rainer Ellinger
Cc: Guillaume Morin, Yannick Le Saint, netfilter, netfilter-devel
On Mon, 9 Sep 2002, Rainer Ellinger wrote:
> Guillaume Morin wrote:
> > > When i "dig www.euro.dell.com", i get in syslog :
> > I'd say that unclean matches the packet because of a checksum
> > mismatch. There must be a buggy router between you and the server.
>
> I ran into the same problem and can also confirm that this is a problem
> with dell's nameserver or a system on dell's side. Further
> investigation with ethereal showed that matching pakets had their udp
> crc set to 0x0000. My questions are:
>
> Should this condition really considered harmful and matched by unclean?
I don't think so. UDP checksumming is not mandatory, but the unclean
module accepts only packets with valid checksums.
> Why is there no corresponding log message from the unclean module?
Because the unclean module does not log packets with invalid checksums.
Regards,
Jozsef
-
E-mail : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu
PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
Address : KFKI Research Institute for Particle and Nuclear Physics
H-1525 Budapest 114, POB. 49, Hungary
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2002-09-09 20:40 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <20020827025542.A15684@yannick.lesaint>
[not found] ` <20020828132419.GC21410@morinfr.org>
2002-09-09 18:27 ` "unclean" ?bug? with dell dns Rainer Ellinger
2002-09-09 20:40 ` Guillaume Morin
2002-09-09 20:40 ` Jozsef Kadlecsik
2002-09-09 20:40 ` Jozsef Kadlecsik
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.