From mboxrd@z Thu Jan 1 00:00:00 1970 From: John Subject: Re: Strange ip_conntrack values Date: Sun, 18 Jul 2004 18:40:09 +0200 Sender: netfilter-admin@lists.netfilter.org Message-ID: References: <200407181617.52652.Antony@Soft-Solutions.co.uk> <200407181731.15709.Antony@Soft-Solutions.co.uk> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <200407181731.15709.Antony@Soft-Solutions.co.uk> Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: netfilter@lists.netfilter.org > > Note the line saying "Server: Microsoft-IIS/5.1" > > I really don't think that can be running under Red Hat 7.2 :) > > Anyway, getting back to the question at hand, I guess one valid approach is > "is this causing you any problems?" ie: Is your connection tracking table > getting full and dropping new connections because of all these 2-minute > timeouts you're seeing? ok for http://24.33.232.227/ I was speaking of our server :)) but strange for : http://24.33.232.227/ why this yahoo page will make a connection to our web pages ... maybe it's just spoofing ... to answer your question, no problem at all for our server, but I don't like not to be able to explain all these strange TCP connections ;) I feel frustrated ...