From: Pablo Neira <pablo@eurodev.net>
To: Krzysztof Oledzki <ole@ans.pl>
Cc: Netfilter Development Mailinglist <netfilter-devel@lists.netfilter.org>
Subject: Re: REJECT using invalid data
Date: Wed, 08 Dec 2004 00:54:09 +0100 [thread overview]
Message-ID: <41B642A1.9030807@eurodev.net> (raw)
In-Reply-To: <Pine.LNX.4.53.0412072347080.2736@bizon.gios.gov.pl>
Krzysztof Oledzki wrote:
>I'm not sure if changing "-j REJECT" to drop invalid tcp packets is good
>idea since we have -m unclean and we can drop such packets explicitly
>with this match.
>
unclean was removed from 2.6 series
> And what about other protocols (udp, etc) when REJECT
>generates ICMP port-unreachable?
>
>
you are right, udp stuff is missing, checkings here are trivial to add
anyway. I'll think about this issue more carefully in next days.
--
Pablo
next parent reply other threads:[~2004-12-07 23:54 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <Pine.LNX.4.53.0412072347080.2736@bizon.gios.gov.pl>
2004-12-07 23:54 ` Pablo Neira [this message]
2004-12-08 0:33 ` REJECT using invalid data Krzysztof Oledzki
2004-12-08 0:52 ` Simon Kirby
[not found] ` <Pine.LNX.4.53.0412101310210.1288@bizon.gios.gov.pl>
2004-12-10 13:10 ` Simon Kirby
[not found] ` <Pine.LNX.4.53.0412101439530.6072@bizon.gios.gov.pl>
2004-12-10 14:49 ` Simon Kirby
2004-12-07 1:01 Simon Kirby
2004-12-07 11:07 ` Pablo Neira
2004-12-07 17:28 ` Simon Kirby
2004-12-07 22:14 ` Pablo Neira
2004-12-08 2:47 ` Kiran Kumar Immidi
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=41B642A1.9030807@eurodev.net \
--to=pablo@eurodev.net \
--cc=netfilter-devel@lists.netfilter.org \
--cc=ole@ans.pl \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.