From mboxrd@z Thu Jan 1 00:00:00 1970 From: Luis Miguel Cruz Subject: Re: unclean rule Date: Fri, 11 Jun 2004 15:09:43 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: <40C9AF17.9010805@b2bi.es> References: <40C99279.7010404@b2bi.es> <20040611142655.141a8084.grisha@unixro.net> <40C9990E.7040607@b2bi.es> <20040611144930.70596784.grisha@unixro.net> Mime-Version: 1.0 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <20040611144930.70596784.grisha@unixro.net> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="iso-8859-1"; format="flowed" To: netfilter@lists.netfilter.org Yes, I have it. But I want to know why is the reason of the unclean module to drop ftp=20 packets for this client :P My rules are: $IPT -A SEGURIDAD -m unclean -j LOG --log-prefix "Paquete Unclean: "=20 --log-ip-options --log-tcp-options --log-tcp-sequence $IPT -A SEGURIDAD -m unclean -j DROP Raileanu Grigore wrote: > On Fri, 11 Jun 2004 13:35:42 +0200 > Luis Miguel Cruz wrote: >=20 >=20 >>I asked it because I remember that in the past this module have a lot o= f=20 >>problems, I like to know if those problems are solved now. >> >>I have a problem with a client, he can=B4t do a ftp to our servers :P >>The traffic match unclean rule: >> >>iptables -A SEGURIDAD -m unclean -j DROP >> >>All traffic must across SEGURIDAD chain, I only have problems with ftp=20 >>service and this client, the rest of the services runs perfectly for hi= m. >> >>What can be wrong? the client=B4s adsl router? :P >> >> >>Raileanu Grigore wrote: >> >> >>>On Fri, 11 Jun 2004 13:07:37 +0200 >>>Luis Miguel Cruz wrote: >>> >>> >>> >>>>Is safe to use unclean module? >>>> >>>>-- >>>>Luis Miguel Cruz >>>> >>>> >>> >>> >>>Yes, you can discard without any problems unclean packets. >>> >> >> >=20 > Try to add in your firewall logging rules, and you can see, which packe= ts are rejected by firewall. >=20