From: /dev/rob0 <rob0@gmx.co.uk>
To: netfilter@lists.netfilter.org
Subject: Re: FW: block + kill connections
Date: Sun, 8 Jan 2006 17:28:01 -0600 [thread overview]
Message-ID: <200601081728.01152.rob0@gmx.co.uk> (raw)
In-Reply-To: <000101c614a7$70964cb0$2801a8c0@MBRC40>
On Sunday 2006-January-08 17:01, Michael D. Berger wrote:
> > > I have the same problem. I DROP in the INPUT chain, but
> > > the connection stays up
Likely so, insofar as your local process knows, as explained in my
corrected reply to Bob Nichols. But ...
> > > and receives more junk.
No, not if you used a rule as the OP did, with -I to put it at the top
of INPUT rules. If a packet matches the first DROP rule, that's where
it stops. If a --state RELATED,ESTABLISHED -j ACCEPT rule precedes the
DROP, yes, but that's a different issue.
> > > I await admonition by those more knowledgeable than I.
Does it make sense now?
--
mail to this address is discarded unless "/dev/rob0"
or "not-spam" is in Subject: header
next prev parent reply other threads:[~2006-01-08 23:28 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2006-01-08 23:01 FW: block + kill connections Michael D. Berger
2006-01-08 23:28 ` /dev/rob0 [this message]
2006-01-09 0:26 ` Michael D. Berger
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200601081728.01152.rob0@gmx.co.uk \
--to=rob0@gmx.co.uk \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.