From: Nick Drage <nickd@funkyjesus.org>
To: netfilter@lists.samba.org
Subject: Re: sendto: Operation not permitted
Date: Fri, 31 May 2002 00:58:32 +0100 [thread overview]
Message-ID: <20020531005832.K27307@funkyjesus.org> (raw)
In-Reply-To: <200205301955.g4UJtIA17159@Networker.rockstone.co.uk>; from Antony@Soft-Solutions.co.uk on Thu, May 30, 2002 at 08:55:17PM +0100
On Thu, May 30, 2002 at 08:55:17PM +0100, Antony Stone wrote:
> On Thursday 30 May 2002 3:13 pm, alex@pilosoft.com wrote:
> > > This type of ICMP message will be RELATED to an existing TCP
> > > connection, therefore it will be allowed through the firewall by the
> > > sort of rulset Claudio was using - if you recall, this was:
> >
> > Ah, I didn't know iptables are smart enough to realize that!
>
> Yes, this is one of the beautiful things about netfilter / iptables - ICMP
> packets are automatically recognised as being RELATED to the TCP packets
> which they're, well, related to.
How does netfilter determine if the ICMP packet is RELATED to anything in
the state table? Anyone suggest documentation that details this?
--
FunkyJesus System Administration Team
next prev parent reply other threads:[~2002-05-30 23:58 UTC|newest]
Thread overview: 5+ messages / expand[flat|nested] mbox.gz Atom feed top
[not found] <Pine.LNX.4.44.0205301011270.31451-100000@paix.pilosoft.com>
2002-05-30 19:55 ` sendto: Operation not permitted Antony Stone
2002-05-30 23:58 ` Nick Drage [this message]
2002-05-31 1:01 ` Joe Patterson
2002-06-05 21:25 ` Nick Drage
[not found] <Pine.LNX.4.44.0205300945340.31451-100000@paix.pilosoft.com>
2002-05-30 19:13 ` Antony Stone
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20020531005832.K27307@funkyjesus.org \
--to=nickd@funkyjesus.org \
--cc=netfilter@lists.samba.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox