From: Remi Denis-Courmont <rdenis@simphalempin.com>
To: Manish Jain <manish.jain@globallogic.com>
Cc: netfilter-devel@lists.netfilter.org
Subject: Re: sendto failed
Date: Thu, 5 Apr 2007 13:48:00 +0200 [thread overview]
Message-ID: <a5e0d66c347aaad688f182fe32748c44@localhost> (raw)
In-Reply-To: <00bf01c77777$0865a080$dd2d10ac@synapse.com>
On Thu, 5 Apr 2007 17:09:12 +0530, "Manish Jain" <manish.jain@globallogic.com> wrote:
> We have some rate limiting rules on OUTPUT side on our box, so if a daemon
> tries to send message beyond a limit, sendto() starts failing. Can we find
> out from return value or errno that we had failed because of firewall.
IIRC, the DROP target will return EACCESS (or maybe it was EPERM?) if it's hit from a
local OUTPUT rule - you can check by yourself anyway. Also IIRC, grsecurity has some
patch to make the OUTPUT filtering silently fail.
Regards,
--
Rémi Denis-Courmont
http://www.remlab.net/
next prev parent reply other threads:[~2007-04-05 11:48 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2007-04-04 12:23 default value of nf_conntrack_tcp_timeout_close_wait Joakim Axelsson
2007-04-04 12:59 ` Henrik Nordstrom
2007-04-04 15:42 ` Patrick McHardy
2007-04-05 8:54 ` Henrik Nordstrom
2007-04-05 11:39 ` sendto failed Manish Jain
2007-04-05 11:48 ` Remi Denis-Courmont [this message]
2007-04-05 7:11 ` default value of nf_conntrack_tcp_timeout_close_wait Jozsef Kadlecsik
2007-04-04 15:30 ` Patrick McHardy
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=a5e0d66c347aaad688f182fe32748c44@localhost \
--to=rdenis@simphalempin.com \
--cc=manish.jain@globallogic.com \
--cc=netfilter-devel@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.