REJECTing ident requests (was: FTP problems)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi!

> Am Don, 2003-02-27 um 21.23 schrieb Del Winiecki:
> Might be an issue with identd. Many ftp servers do reverse identd lookups on
> the client. If you drop these on your firewall they have to wait for the timeout.
> Reject identd on your firewall:
> iptables -A INPUT -p tcp --dport 113 -j REJECT

Better use "--reject-with tcp-reset".

Quite some time ago, I had strange problems with some (broken?) mail
servers refusing to accept mail when I simply REJECTed ident connects -
apparently they didn't like the default ICMP error message
(icmp-port-unreachable, I think)...

Martin



[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux