From: Arnt Karlsen <arnt@c2i.net>
To: netfilter@lists.netfilter.org
Subject: Re: could someone translate these rules inot plain english
Date: Thu, 22 Jan 2004 10:04:48 +0100 [thread overview]
Message-ID: <20040122100448.1845bf6b.arnt@c2i.net> (raw)
In-Reply-To: <400F6EF4.2060608@lintelsys.com.au>
On Thu, 22 Jan 2004 17:34:28 +1100,
Alex Satrapa <alex@lintelsys.com.au> wrote in message
<400F6EF4.2060608@lintelsys.com.au>:
> Technical wrote:
> > -A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j
> > ACCEPT
>
> For this chain (presumably packets inbound to the network), accept
> any packets that are part of established TCP connections (ie: a SYN
> packet for the connection has gone out from the network), or related
> to UDP packets that have gone out through the firewall.
>
> > -A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited
>
> Otherwise, reject the packet by sending back an ICMP message telling
> the remote host that communication with its intended target is
> administratively prohibited.
.."Otherwise, " is not part of this last rule. "Otherwise, " could
understood as a context where these 2 rules appear as shown.
--
..med vennlig hilsen = with Kind Regards from Arnt... ;-)
...with a number of polar bear hunters in his ancestry...
Scenarios always come in sets of three:
best case, worst case, and just in case.
next prev parent reply other threads:[~2004-01-22 9:04 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2004-01-22 6:10 could someone translate these rules inot plain english Technical
2004-01-22 6:34 ` Ray Leach
2004-01-22 6:34 ` Alex Satrapa
2004-01-22 9:04 ` Arnt Karlsen [this message]
2004-01-22 10:48 ` Technical
2004-01-22 17:19 ` Unknown, Alistair Tonner
2004-01-22 19:04 ` Arnt Karlsen
2004-01-22 21:40 ` Alex Satrapa
-- strict thread matches above, loose matches on Subject: below --
2004-01-22 16:18 bmcdowell
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20040122100448.1845bf6b.arnt@c2i.net \
--to=arnt@c2i.net \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox