From: "Gáspár Lajos" <swifty@freemail.hu>
To: "eial@cs.bgu.ac.il" <eial@cs.bgu.ac.il>
Cc: netfilter@vger.kernel.org
Subject: Re: accept rule not working.
Date: Thu, 08 May 2008 11:28:18 +0200 [thread overview]
Message-ID: <4822C7B2.3070006@freemail.hu> (raw)
In-Reply-To: <200805072125.m47LPku7018772@indigo.cs.bgu.ac.il>
eial@cs.bgu.ac.il írta:
> 607K 804M ACCEPT all -- eth0 * 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED
> 0 0 ACCEPT tcp -- eth0 * 192.168.113.94 0.0.0.0/0 state NEW tcp spt:80
> 930 574K LOG all -- eth0 * 0.0.0.0/0 0.0.0.0/0 LOG flags 0 level 4 prefix `Rejected: '
> 930 574K REJECT all -- eth0 * 0.0.0.0/0 0.0.0.0/0 reject-with icmp-port-unreachable
>
> rejection log example:
> Rejected: IN=eth0 OUT= MAC=mymacaddress SRC=192.168.113.94 DST=192.168.114.2 LEN=40 TOS=0x00 PREC=0x00 TTL=52 ID=0 DF PROTO=TCP SPT=80 DPT=59173 WINDOW=0 RES=0x00 RST URGP=0
>
>
Yes... Correct...
These packets are not in the state of NEW,RELATED,ESTABLISHED...
Maybe just INVALID...
Swifty
next prev parent reply other threads:[~2008-05-08 9:28 UTC|newest]
Thread overview: 9+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-05-07 15:14 accept rule not working eial
2008-05-07 15:29 ` Gáspár Lajos
2008-05-07 15:39 ` Karim Asif
2008-05-07 15:58 ` Jan Engelhardt
2008-05-07 15:29 ` Rob Sterenborg
2008-05-07 21:25 ` eial
2008-05-08 9:28 ` Gáspár Lajos [this message]
2008-05-08 5:25 ` eial
[not found] <200805090443.m494hPLn001206@indigo.cs.bgu.ac.il>
2008-05-09 6:37 ` Gáspár Lajos
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4822C7B2.3070006@freemail.hu \
--to=swifty@freemail.hu \
--cc=eial@cs.bgu.ac.il \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox