From mboxrd@z Thu Jan  1 00:00:00 1970
From: =?UTF-8?B?QXJ0xatyYXMgxaBsYWp1cw==?= <x11@arturaz.net>
Subject: Re: Mystics of packet forwarding
Date: Wed, 07 Jan 2009 11:28:11 +0200
Message-ID: <496475AB.9040303@arturaz.net>
References: <4963B3EB.6090806@arturaz.net>
Mime-Version: 1.0
Content-Transfer-Encoding: 7bit
Return-path: <netfilter-owner@vger.kernel.org>
In-Reply-To: <4963B3EB.6090806@arturaz.net>
Sender: netfilter-owner@vger.kernel.org
List-ID: <netfilter.vger.kernel.org>
Content-Type: text/plain; charset="us-ascii"; format="flowed"
To: netfilter@vger.kernel.org

Ok, it seems that really - someone in LAN is attacking the internet.

If I turn on forwarding for few users like me, some other computer-literate 
friends - digg.com still works :))

Now it's the question how do I catch bad guys? What should I look into? Packet 
bursts? Lot's of new connections? Etc?