* [Bug]: (some) ICMP replies marked as invalid.
@ 2003-05-27 21:17 Anders Fugmann
2003-05-31 17:10 ` Harald Welte
0 siblings, 1 reply; 2+ messages in thread
From: Anders Fugmann @ 2003-05-27 21:17 UTC (permalink / raw)
To: netfilter-devel
Hi,
The rule:
iptables -I OUTPUT -m state --state INVALID -j DROP
(all other chains empty with policy accept), results in ICMP replies to
tracetoute being dropped.
Is dropping invalid packets on the output chain not recommended, or is
the code determining if a packet is invalid broken?
Regards
Anders Fugmann
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: [Bug]: (some) ICMP replies marked as invalid.
2003-05-27 21:17 [Bug]: (some) ICMP replies marked as invalid Anders Fugmann
@ 2003-05-31 17:10 ` Harald Welte
0 siblings, 0 replies; 2+ messages in thread
From: Harald Welte @ 2003-05-31 17:10 UTC (permalink / raw)
To: Anders Fugmann; +Cc: netfilter-devel
[-- Attachment #1: Type: text/plain, Size: 878 bytes --]
On Tue, May 27, 2003 at 11:17:39PM +0200, Anders Fugmann wrote:
> Hi,
>
> The rule:
> iptables -I OUTPUT -m state --state INVALID -j DROP
> (all other chains empty with policy accept), results in ICMP replies to
> tracetoute being dropped.
>
> Is dropping invalid packets on the output chain not recommended, or is
> the code determining if a packet is invalid broken?
since this is a bug report, please put it into bugzilla.netfilter.org.
thanks a lot.
> Regards
> Anders Fugmann
--
- Harald Welte <laforge@netfilter.org> http://www.netfilter.org/
============================================================================
"Fragmentation is like classful addressing -- an interesting early
architectural error that shows how much experimentation was going
on while IP was being designed." -- Paul Vixie
[-- Attachment #2: Type: application/pgp-signature, Size: 189 bytes --]
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2003-05-31 17:10 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-05-27 21:17 [Bug]: (some) ICMP replies marked as invalid Anders Fugmann
2003-05-31 17:10 ` Harald Welte
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.