Jan Engelhardt wrote: > On Wednesday 2009-08-26 14:55, Patrick McHardy wrote: > >> Pascal Hambourg wrote: >>> Hello, >>> >>> May I ask what are the reasons for a helper to drop packets ? >> Mainly parsing errors, memory allocation errors and bugs. > > I am not so quite sure whether parsing errors (like, a port > 65535 for > FTP) should cause them to be dropped; after all, it might be, for > example, a vendor-specific form of a protocol that just does not fit the > nf_conntrack_ftp parsing exactly. That is to say, packets should be let > through, though without setting up expectations. Thats what usually happens. There are a few exceptions though, most notably the SIP helper, which drops packets since they might already have been mangled. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
