Linux Netfilter discussions
 help / color / mirror / Atom feed
* iptables dropping wrong packets
@ 2003-03-05 14:37 nedco
  2003-03-05 15:21 ` Module for Oracle with NAT Newton
  2003-03-06  8:49 ` Accouting hare ram
  0 siblings, 2 replies; 4+ messages in thread
From: nedco @ 2003-03-05 14:37 UTC (permalink / raw)
  To: netfilter




Hi,  
 
looks like some of correct packes are droped  
 
Chain FORWARD (policy ACCEPT 0 packets, 0 bytes) 
num   pkts bytes target     prot opt in     out     source               destination

1    36142   16M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0
         TOS 
match 0x00 
2     168K   54M ACCEPT     all  --  *      *       0.0.0.0/0            0.0.0.0/0
         TOS 
match 0x10 
3       27  1782 LOG        all  --  *      *       0.0.0.0/0            0.0.0.0/0
         LOG 
flags 0 level 4 
4       27  1782 DROP       all  --  *      *       0.0.0.0/0            0.0.0.0/0

 
 
in log we can see that TOS of packets is 0x0 they are also packets with 0x10
 
 
 
Mar  5 04:32:10 proliant kernel: IN=eth0 OUT=eth1 SRC=62.176.73.4 DST=62.176.105.30
LEN=76 
TOS=0x00 PREC=0xC0 
Mar  5 04:32:15 proliant kernel: IN=eth0 OUT=eth1 SRC=62.176.73.4 DST=62.176.105.30
LEN=76 
TOS=0x00 PREC=0xC0 
Mar  5 04:32:18 proliant kernel: IN=eth1 OUT=eth0 SRC=212.5.149.252 DST=212.5.134.3
LEN=87 
TOS=0x00 PREC=0xC0 
Mar  5 04:32:19 proliant kernel: IN=eth0 OUT=eth2 SRC=62.176.73.4 DST=62.176.106.69
LEN=88 
TOS=0x00 PREC=0xC0 
Mar  5 04:32:19 proliant kernel: IN=eth0 OUT=eth1 SRC=62.176.73.4 DST=62.176.105.30
LEN=76 
TOS=0x00 PREC=0xC0 
Mar  5 04:32:29 proliant kernel: IN=eth0 OUT=eth2 SRC=195.230.9.159 DST=62.176.106.69
LEN=48 
TOS=0x00 PREC=0x8 
Mar  5 04:32:31 proliant kernel: IN=eth0 OUT=eth1 SRC=62.176.73.4 DST=62.176.105.30
LEN=76 
TOS=0x00 PREC=0xC0 
Mar  5 04:32:32 proliant kernel: IN=eth0 OUT=eth2 SRC=195.230.9.159 DST=62.176.106.69
LEN=48 
TOS=0x00 PREC=0x8 
 
Am I doing something wrong? 
 
10x in advance 
Nedko 


^ permalink raw reply	[flat|nested] 4+ messages in thread

end of thread, other threads:[~2003-03-06  8:49 UTC | newest]

Thread overview: 4+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2003-03-05 14:37 iptables dropping wrong packets nedco
2003-03-05 15:21 ` Module for Oracle with NAT Newton
2003-03-05 17:09   ` Raymond Leach
2003-03-06  8:49 ` Accouting hare ram

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox