From: Pascal Hambourg <pascal.mail@plouf.fr.eu.org>
To: Markus Feldmann <feldmann_markus@gmx.de>
Cc: netfilter@vger.kernel.org
Subject: Re: iptables NEW or SYN
Date: Thu, 13 May 2010 22:09:16 +0200 [thread overview]
Message-ID: <4BEC5C6C.1010704@plouf.fr.eu.org> (raw)
In-Reply-To: <hshf8e$jpn$1@dough.gmane.org>
Hello,
Markus Feldmann a écrit :
> So NEW means the IP was never seen before and the SYN flag means, that a
> new connection begins? So the first packet from a source adress is NEW
> whether or nor it has the SYN flag set ?
Not exactly. The connection tracking works per connection, not per
source address. NEW means that the packet belongs to a connection that
was not seen by the connection tracking before. SYN (without RST nor
ACK) means that the packet purpose is to start a new TCP connection, but
it could be a duplicate SYN for an already established connection.
> If this is the case, than i need only the SYN flag to let establish
> incoming connection to my apache-Server?
It depends on your needs.
next prev parent reply other threads:[~2010-05-13 20:09 UTC|newest]
Thread overview: 21+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-05-13 17:08 iptables NEW or SYN Markus Feldmann
2010-05-13 17:18 ` Jan Engelhardt
2010-05-13 17:42 ` Markus Feldmann
2010-05-13 18:00 ` Markus Feldmann
2010-05-13 18:09 ` Markus Feldmann
2010-05-13 20:09 ` Pascal Hambourg [this message]
2010-05-13 20:55 ` Markus Feldmann
2010-05-13 18:05 ` Markus Feldmann
2010-05-13 18:19 ` Curby
2010-05-13 18:45 ` Markus Feldmann
2010-05-13 19:23 ` Mistick Levi
2010-05-13 21:45 ` Markus Feldmann
2010-05-13 22:46 ` Curby
2010-05-14 0:06 ` Markus Feldmann
2010-05-14 0:23 ` Markus Feldmann
2010-05-14 2:19 ` Markus Feldmann
2010-05-14 6:41 ` Jan Engelhardt
2010-05-14 12:16 ` Markus Feldmann
2010-05-14 5:08 ` Mart Frauenlob
-- strict thread matches above, loose matches on Subject: below --
2010-05-13 13:17 Markus Feldmann
2010-05-13 15:21 ` ratheesh k
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4BEC5C6C.1010704@plouf.fr.eu.org \
--to=pascal.mail@plouf.fr.eu.org \
--cc=feldmann_markus@gmx.de \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.