From: Gioele Barabucci <dev@gioelebarabucci.com>
To: netfilter@lists.netfilter.org
Subject: ESTABILISHED connections are not that estabilished
Date: Wed, 27 Jul 2005 18:10:15 +0200 [thread overview]
Message-ID: <dc8blc$p5s$1@sea.gmane.org> (raw)
In my logs I often find reports of dropped input packets from my DNS:53 or
dropped output packets generated from localhost:25 to other mail servers.
They look like these:
iptables INPUT DROP IN=eth0 OUT= SRC=69.93.28.254 DST=myIP LEN=70 TOS=0x00
PREC=0x00 TTL=54 ID=0 DF PROTO=UDP SPT=53 DPT=4156 LEN=50
iptables OUTPUT DROP IN= OUT=eth0 SRC=myIP DST=219.136.64.239 LEN=87
TOS=0x00 PREC=0x00 TTL=64 ID=44757 DF PROTO=TCP SPT=25 DPT=3062 WINDOW=5840
RES=0x00 ACK PSH FIN URGP=0
I thought these connections should be handled by
iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
and not dropped by the default policy. The logs show that this is not true.
Why are these packets dropped?
--
Gioele <dev@gioelebarabucci.com>
next reply other threads:[~2005-07-27 16:10 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-07-27 16:10 Gioele Barabucci [this message]
2005-07-27 18:52 ` ESTABILISHED connections are not that estabilished Gioele Barabucci
2005-07-28 4:57 ` curby .
2005-07-28 9:52 ` Gioele Barabucci
2005-07-28 10:41 ` /dev/rob0
2005-07-28 22:04 ` Gioele Barabucci
2005-07-31 18:20 ` /dev/rob0
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='dc8blc$p5s$1@sea.gmane.org' \
--to=dev@gioelebarabucci.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.