From: Grant Taylor <gtaylor@riverviewtech.net>
To: Mail List - Netfilter <netfilter@lists.netfilter.org>
Subject: Re: icmp-type question
Date: Wed, 27 Jun 2007 14:16:44 -0500 [thread overview]
Message-ID: <4682B79C.3040304@riverviewtech.net> (raw)
In-Reply-To: <468299E4.3020906@mailinator.com>
On 6/27/2007 12:09 PM, Mike Wright wrote:
> My thought is that if no timestamp requests are accepted no timestamp
> replies would be generated. In case that's an invalid assumption you
> could also filter the output chain.
*nod*
> Depending on what else you are doing you may need matching rules in your
> forward chains, too.
This is why a (sub)chain to do the filtering is nice. Jump to the same
(sub)chain from both filter:INPUT and filter:FORWARD and return out of
it with any traffic that passes back to the rule after the one that
jumped in to it. Just have your (sub)chain DROP the packet if it does
match and allow all non-matching traffic to fall off the end and RETURN.
Seeing as how it is a (sub)chain, I don't think you can set a policy
of RETURN and you would have to create a rule to RETURN, but this is a
non-issue.
Grant. . . .
next prev parent reply other threads:[~2007-06-27 19:16 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <35f70db10706270926u708cc4f4ta0a962ca219ce91e@mail.gmail.com>
2007-06-27 16:27 ` icmp-type question Ross Cameron
2007-06-27 17:09 ` Mike Wright
2007-06-27 19:16 ` Grant Taylor [this message]
2007-06-28 7:48 ` Ross Cameron
2007-06-28 10:26 ` Maximilian Wilhelm
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4682B79C.3040304@riverviewtech.net \
--to=gtaylor@riverviewtech.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.