On Tue, Dec 1, 2009 at 5:14 PM, Jozsef Kadlecsik <kadlec@xxxxxxxxxxxxxxxxx> wrote: > On Mon, 30 Nov 2009, Changli Gao wrote: > >> Think about this topologic: >> >> Attacker -> router1 -> router2 -> ... -> Linux Router -> Apache. >> >> the packets in the other direction won't be sent to the Linux Router, >> as the other routers will routed them to the other place. > > Sorry, I don't get it. There is a assumption: the final receiver doesn't reply any packet for this packet in the invalid state. -- Regards， Changli Gao(xiaosuo@xxxxxxxxx) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
