Re: Mystics of packet forwarding

["Ivan Petrushev" <ivanatora@gmail.com>]

> Ok, it seems that really - someone in LAN is attacking the internet.
It could be worms or viruses. In my experience every home or student
Windows network is awfully crowded with viruses. Maybe you should work
on filtering your outgoing traffic.

I'm not sure, but search on google what could cause ban on DIGG or
YAHOO. Probably lots of connections or flood could result in banning
you from these sites. But you say that immediately when you remove the
NAT rules the access is restored? I don't believe their firewalls are
quick enough to restore your position two seconds after you stop being
"bad" to them. Maybe something else is the reason.

Anyway, do you have any output filtering rules?

On Wed, Jan 7, 2009 at 11:28 AM, Artûras Ðlajus <x11@arturaz.net> wrote:
> Ok, it seems that really - someone in LAN is attacking the internet.
>
> If I turn on forwarding for few users like me, some other computer-literate
> friends - digg.com still works :))
>
> Now it's the question how do I catch bad guys? What should I look into?
> Packet bursts? Lot's of new connections? Etc?
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>