* -m owner --uid-owner problems
@ 2004-12-24 11:08 Venelin Mihaylov
0 siblings, 0 replies; only message in thread
From: Venelin Mihaylov @ 2004-12-24 11:08 UTC (permalink / raw)
To: netfilter
Hello,
I implemented an firewall, which is very strict (at least this was my
goal :) ) when it comes to permitting output packets. I used --uid-owner
to permit outgoing packets only for the user qmailq (I am using qmail as
a mail server). The thing is that in my firewall logs for the rejected
packets I get too much entries for packets ending a connection - with
ACK,FIN, and eventually PSH flags set. Also, as it seems packets with
only a RST flag set are rejected too.
This is in the OUTPUT chain, for ports 80,25.
Any ideas, how I can get rid of this ? As far as I can tell all
connections are carried out successfully, but these entries are flooding
my logs, and would distract from any dangerous happenings ;).
Venelin Mihaylov, CCNA
System Administrator
HostColor LLC
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2004-12-24 11:08 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-12-24 11:08 -m owner --uid-owner problems Venelin Mihaylov
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox