All of lore.kernel.org
 help / color / mirror / Atom feed
From: Nemeth Denes <nemeth.denes@iit.bme.hu>
To: netfilter@vger.kernel.org
Subject: netfilter missing interface name
Date: Mon, 15 Feb 2010 10:19:26 +0100	[thread overview]
Message-ID: <4B79119E.9090506@iit.bme.hu> (raw)

Hi

The INPUT chain looks like the following:

pkts bytes target     prot opt in     out     source               
destination
  35  3235 LOG_DROP   all  --  pub    *       0.0.0.0/0           
!1.2.3.4      [goto]
   0  0    LOG_ACC    tcp  --  *      *       127.0.0.1            
127.0.0.1           state NEW tcp dpt:3000

The following packet is dropped:

IN= OUT=lo SRC=127.0.0.1 DST=127.0.0.1 LEN=60 TOS=0x10 PREC=0x00 TTL=64 
ID=31349 DF PROTO=TCP SPT=35130 DPT=3000 WINDOW=32792 RES=0x00 SYN URGP=

which was the cause of executing the "telnet localhost 3000" command
The "pub" interface is a physical ethernet card.

Why is the "IN=" blanc?
Why does the packet match to the first rule?
How is it possible to match only to the second rule?

Thanks Denes

             reply	other threads:[~2010-02-15  9:19 UTC|newest]

Thread overview: 2+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2010-02-15  9:19 Nemeth Denes [this message]
2010-02-15  9:37 ` netfilter missing interface name Mart Frauenlob

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=4B79119E.9090506@iit.bme.hu \
    --to=nemeth.denes@iit.bme.hu \
    --cc=netfilter@vger.kernel.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.