Linux Netfilter discussions
 help / color / mirror / Atom feed
From: Eliezer Croitoru <eliezer@ngtech.co.il>
To: Vladimir Budnev <vladimir.budnev@gmail.com>
Cc: netfilter@vger.kernel.org
Subject: Re: Iptables rules with module string give strange counter results
Date: Thu, 15 Nov 2012 17:47:51 +0200	[thread overview]
Message-ID: <50A50EA7.6090001@ngtech.co.il> (raw)
In-Reply-To: <CAAvRK96MCUh4XmeDVd8VU+P5_QvxO6D1_RYHxWBO6MPcOWCRKw@mail.gmail.com>

Is this a router?
The src is the machine or other machine?

Regards,
Eliezer

On 11/15/2012 4:01 PM, Vladimir Budnev wrote:
> Hello al.
>
> This is the first time I'm using matching string module for iptables
> and met some strange behaviour I can't overcome.
>
> In short, it looks like iptables passes "trimmed" packets to module,
> so module can not parse whole packet for string.
> I cant find any information about such behaviour on net. All examples
> and tutors should work like a charm, but they dont.

  reply	other threads:[~2012-11-15 15:47 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2012-11-15 14:01 Iptables rules with module string give strange counter results Vladimir Budnev
2012-11-15 15:47 ` Eliezer Croitoru [this message]
2012-11-15 18:28   ` Vladimir Budnev
2012-11-15 19:20     ` Eliezer Croitoru
  -- strict thread matches above, loose matches on Subject: below --
2012-11-15 13:50 Vladimir Budnev
     [not found] ` <20121116124526.GA11345@lia.ch>
     [not found]   ` <CAAvRK97NbO2fdW4T=7_WFCiuhd=93nwL0WcOrtr8FCXezgp8zw@mail.gmail.com>
     [not found]     ` <20121116163043.GA13245@lia.ch>
     [not found]       ` <50A967F3.3060707@fastmail.fm>
2012-11-19  9:10         ` Vladimir Budnev

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=50A50EA7.6090001@ngtech.co.il \
    --to=eliezer@ngtech.co.il \
    --cc=netfilter@vger.kernel.org \
    --cc=vladimir.budnev@gmail.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox