* Re: "unclean" ?bug? with dell dns [not found] ` <20020828132419.GC21410@morinfr.org> @ 2002-09-09 18:27 ` Rainer Ellinger 2002-09-09 20:40 ` Guillaume Morin 2002-09-09 20:40 ` Jozsef Kadlecsik 0 siblings, 2 replies; 4+ messages in thread From: Rainer Ellinger @ 2002-09-09 18:27 UTC (permalink / raw) To: Guillaume Morin, Yannick Le Saint; +Cc: netfilter Guillaume Morin wrote: > > When i "dig www.euro.dell.com", i get in syslog : > I'd say that unclean matches the packet because of a checksum > mismatch. There must be a buggy router between you and the server. I ran into the same problem and can also confirm that this is a problem with dell's nameserver or a system on dell's side. Further investigation with ethereal showed that matching pakets had their udp crc set to 0x0000. My questions are: Should this condition really considered harmful and matched by unclean? Why is there no corresponding log message from the unclean module? -- rainer@ellinger.de ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: "unclean" ?bug? with dell dns 2002-09-09 18:27 ` "unclean" ?bug? with dell dns Rainer Ellinger @ 2002-09-09 20:40 ` Guillaume Morin 2002-09-09 20:40 ` Jozsef Kadlecsik 1 sibling, 0 replies; 4+ messages in thread From: Guillaume Morin @ 2002-09-09 20:40 UTC (permalink / raw) To: Rainer Ellinger; +Cc: Yannick Le Saint, netfilter Hi Rainer, Dans un message du 09 sep à 20:27, Rainer Ellinger écrivait : > investigation with ethereal showed that matching pakets had their udp > crc set to 0x0000. My questions are: > > Should this condition really considered harmful and matched by unclean? No, that's a bug. I'll submit a patch for that. > Why is there no corresponding log message from the unclean module? The consensus is that for a simple checksum error a log message is not needed. Regards, -- Guillaume Morin <guillaume@morinfr.org> Justice is lost, Justice is raped, Justice is done. (Metallica) ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: "unclean" ?bug? with dell dns 2002-09-09 18:27 ` "unclean" ?bug? with dell dns Rainer Ellinger @ 2002-09-09 20:40 ` Jozsef Kadlecsik 2002-09-09 20:40 ` Jozsef Kadlecsik 1 sibling, 0 replies; 4+ messages in thread From: Jozsef Kadlecsik @ 2002-09-09 20:40 UTC (permalink / raw) To: Rainer Ellinger Cc: Guillaume Morin, Yannick Le Saint, netfilter, netfilter-devel On Mon, 9 Sep 2002, Rainer Ellinger wrote: > Guillaume Morin wrote: > > > When i "dig www.euro.dell.com", i get in syslog : > > I'd say that unclean matches the packet because of a checksum > > mismatch. There must be a buggy router between you and the server. > > I ran into the same problem and can also confirm that this is a problem > with dell's nameserver or a system on dell's side. Further > investigation with ethereal showed that matching pakets had their udp > crc set to 0x0000. My questions are: > > Should this condition really considered harmful and matched by unclean? I don't think so. UDP checksumming is not mandatory, but the unclean module accepts only packets with valid checksums. > Why is there no corresponding log message from the unclean module? Because the unclean module does not log packets with invalid checksums. Regards, Jozsef - E-mail : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary ^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: "unclean" ?bug? with dell dns @ 2002-09-09 20:40 ` Jozsef Kadlecsik 0 siblings, 0 replies; 4+ messages in thread From: Jozsef Kadlecsik @ 2002-09-09 20:40 UTC (permalink / raw) To: Rainer Ellinger Cc: Guillaume Morin, Yannick Le Saint, netfilter, netfilter-devel On Mon, 9 Sep 2002, Rainer Ellinger wrote: > Guillaume Morin wrote: > > > When i "dig www.euro.dell.com", i get in syslog : > > I'd say that unclean matches the packet because of a checksum > > mismatch. There must be a buggy router between you and the server. > > I ran into the same problem and can also confirm that this is a problem > with dell's nameserver or a system on dell's side. Further > investigation with ethereal showed that matching pakets had their udp > crc set to 0x0000. My questions are: > > Should this condition really considered harmful and matched by unclean? I don't think so. UDP checksumming is not mandatory, but the unclean module accepts only packets with valid checksums. > Why is there no corresponding log message from the unclean module? Because the unclean module does not log packets with invalid checksums. Regards, Jozsef - E-mail : kadlec@blackhole.kfki.hu, kadlec@sunserv.kfki.hu PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary ^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2002-09-09 20:40 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
[not found] <20020827025542.A15684@yannick.lesaint>
[not found] ` <20020828132419.GC21410@morinfr.org>
2002-09-09 18:27 ` "unclean" ?bug? with dell dns Rainer Ellinger
2002-09-09 20:40 ` Guillaume Morin
2002-09-09 20:40 ` Jozsef Kadlecsik
2002-09-09 20:40 ` Jozsef Kadlecsik
This is an external index of several public inboxes, see mirroring instructions on how to clone and mirror all data and code used by this external index.