From: "curby ." <curby.public@gmail.com>
To: Andrew <andrewna@mymcsb.com>
Cc: netfilter@lists.netfilter.org
Subject: Re: Problem downloading large files from Apache from far
Date: Wed, 27 Jul 2005 23:04:02 -0600 [thread overview]
Message-ID: <5d2f379105072722046f7e3285@mail.gmail.com> (raw)
In-Reply-To: <NJBBIPFCOLMFJFKBPLDMAEJJCCAA.andrewna@mymcsb.com>
On 7/26/05, Andrew <andrewna@mymcsb.com> wrote:
> But the question is, why are subsequent packets coming from the remote
> machine being identified as INVALID? Will allowing INVALID packets cause
> other problems?
Allowing INVALID is generally unnecessary, and can let certain port
scans through undetected.
> The Linux machine is actually behind another Cisco PIX firewall. Could the
> hardware firewall be translating the packets wrongly? Any ideas?
Can you try with a machine between the firewalls? That would simulate
a web request but bypass PIX.
[iptables]---[testbox]---[PIX]---[Internet]
Running a tcpdump might also give useful information.
next prev parent reply other threads:[~2005-07-28 5:04 UTC|newest]
Thread overview: 6+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <mailman.0.1122427457.12364.netfilter@lists.netfilter.org>
2005-07-27 1:21 ` Problem downloading large files from Apache from far Andrew
2005-07-27 11:03 ` Mohamed Eldesoky
2005-07-28 0:47 ` Andrew
2005-07-28 11:56 ` John A. Sullivan III
2005-07-28 5:04 ` curby . [this message]
2005-07-28 7:18 ` Andrew
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5d2f379105072722046f7e3285@mail.gmail.com \
--to=curby.public@gmail.com \
--cc=andrewna@mymcsb.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.