On Tue, 1 Dec 2009, Changli Gao wrote: > On Tue, Dec 1, 2009 at 5:14 PM, Jozsef Kadlecsik > <kadlec@xxxxxxxxxxxxxxxxx> wrote: > > On Mon, 30 Nov 2009, Changli Gao wrote: > > > >> Think about this topologic: > >> > >> Attacker -> router1 -> router2 -> ... -> Linux Router -> Apache. > >> > >> the packets in the other direction won't be sent to the Linux Router, > >> as the other routers will routed them to the other place. > > > > Sorry, I don't get it. > > There is a assumption: the final receiver doesn't reply any packet for > this packet in the invalid state. Who's assumption? Mine? Yours? For which case did you answer this? Please describe a complete example, not bits here and there and leaving out conditions. Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
