From: "Lukas Hubschmid (s)" <lukas.hubschmid@students.fhnw.ch>
To: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Cc: netfilter@vger.kernel.org
Subject: Re: TCP sequence checking
Date: Wed, 3 Jun 2015 19:52:21 +0200 [thread overview]
Message-ID: <556F3ED5.6000205@students.fhnw.ch> (raw)
In-Reply-To: <alpine.DEB.2.10.1506031915590.23917@blackhole.kfki.hu>
Thank you Jozsef!
I am not quite sure if I read the C-code correctly - so TCP sequence
checking seems to be enabled by default, right? Or do I need to set some
flag when adding a rule?
KR,
Lukas
Am 03.06.2015 um 19:16 schrieb Jozsef Kadlecsik:
> On Wed, 3 Jun 2015, Lukas Hubschmid (s) wrote:
>
>> Does iptables support TCP sequence checking, to check if a TCP packet has a
>> valid sequence number (according to previous packets of the same TCP
>> connection)?
> Yes, have a look at net/netfilter/nf_conntrack_proto_tcp.c in the kernel
> source tree.
>
> Best regards,
> Jozsef
> -
> E-mail : kadlec@blackhole.kfki.hu, kadlecsik.jozsef@wigner.mta.hu
> PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt
> Address : Wigner Research Centre for Physics, Hungarian Academy of Sciences
> H-1525 Budapest 114, POB. 49, Hungary
next prev parent reply other threads:[~2015-06-03 17:52 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2015-06-03 13:18 TCP sequence checking Lukas Hubschmid (s)
2015-06-03 17:16 ` Jozsef Kadlecsik
2015-06-03 17:52 ` Lukas Hubschmid (s) [this message]
2015-06-03 19:00 ` Jozsef Kadlecsik
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=556F3ED5.6000205@students.fhnw.ch \
--to=lukas.hubschmid@students.fhnw.ch \
--cc=kadlec@blackhole.kfki.hu \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.