From: "Paridhi Bansal" <paridhibansal@mail.com>
To: IPtables <netfilter@lists.netfilter.org>
Subject: Re: help iptables queuing
Date: Wed, 18 Jun 2003 05:48:33 -0500 [thread overview]
Message-ID: <20030618104833.68889.qmail@mail.com> (raw)
hi
how do i check that whether conn tracking module is installed or not??
Actually, this problem was not coming earlier..suddenly has it statred coming..now what is really puzzling me is that when i also queue packets from FORWARD chain(i did this just to check in case pkts were being directly sent to this chain instead of prerouting), i receive all the packets through prerouting, forward and postrouting chains..and when i change the FORWARD back to ACCEPT all without queuing, again,the same problem..i receive only the first pktof every TCP session in prerouting and postrouting chains....
Paridhi
paridhi
--=-togof5NfyiIsESYp214i
Content-Type: text/plain
Content-Transfer-Encoding: quoted-printable
Hi
Is your kernel compiled with connection tracking support (either in the
kernel, or as a module)?
Ray
On Wed, 2003-06-18 at 11:38, Paridhi Bansal wrote:
> HI!!
>=20
> I am using RedHat linux 7.3 with iptablesv1.2.5..I am using iptables queu=
ing to get the packets to my application...I have used thefollowing
> iptables' commands:
>=20
> iptables -t nat -A OUTPUT -j QUEUE
> iptables -t nat -A PREROUTING -j QUEUE
> iptables -t nat -A POSTROUTING -j QUEUE
> iptables -A INPUT -j QUEUE
>=20
> But instead of getting all the packets,i just get first packet of every c=
onnection.For example, just first packet of TCP telnet, FTP connection (wit=
h SYN bit set and ACK not set )and not the subsequent packets.Why is this s=
o?????
>=20
> Can somebody help me with the explanation of this??????
>=20
>=20
> Paridhi
--=20
--
Raymond Leach <raymondl@knowledgefactory.co.za>
Network Support Specialist
http://www.knowledgefactory.co.za
"lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import"
Key fingerprint =3D 7209 A695 9EE0 E971 A9AD 00EE 8757 EE47 F06F FB28
--
--=-togof5NfyiIsESYp214i
Content-Type: application/pgp-signature; name=signature.asc
Content-Description: This is a digitally signed message part
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iD8DBQA+8D/oh1fuR/Bv+ygRAiYjAJ4lxwkffVRq3EoL7sMgTysGLGiSQQCgnJnj
J8Gn0UxV7ikesTV83upYooA=
=5ugA
-----END PGP SIGNATURE-----
--=-togof5NfyiIsESYp214i--
--
__________________________________________________________
Sign-up for your own FREE Personalized E-mail at Mail.com
http://www.mail.com/?sr=signup
CareerBuilder.com has over 400,000 jobs. Be smarter about your job search
http://corp.mail.com/careers
next reply other threads:[~2003-06-18 10:48 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-06-18 10:48 Paridhi Bansal [this message]
2003-06-18 11:36 ` help iptables queuing George Vieira
-- strict thread matches above, loose matches on Subject: below --
2003-06-18 11:46 Paridhi Bansal
2003-06-18 12:33 ` Ray Leach
2003-06-18 9:38 Paridhi Bansal
2003-06-18 10:33 ` Ray Leach
2003-06-18 10:55 ` George Vieira
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20030618104833.68889.qmail@mail.com \
--to=paridhibansal@mail.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox