Re: unclean rule

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Yes, I have it.
But I want to know why is the reason of the unclean module to drop ftp packets for this client :P


My rules are:
$IPT -A SEGURIDAD -m unclean -j LOG --log-prefix "Paquete Unclean: " --log-ip-options --log-tcp-options --log-tcp-sequence
$IPT -A SEGURIDAD -m unclean -j DROP



Raileanu Grigore wrote:


On Fri, 11 Jun 2004 13:35:42 +0200
Luis Miguel Cruz <luismi@xxxxxxx> wrote:


I asked it because I remember that in the past this module have a lot of problems, I like to know if those problems are solved now.

I have a problem with a client, he can´t do a ftp to our servers :P
The traffic match unclean rule:

iptables -A SEGURIDAD -m unclean -j DROP

All traffic must across SEGURIDAD chain, I only have problems with ftp service and this client, the rest of the services runs perfectly for him.

What can be wrong? the client´s adsl router? :P


Raileanu Grigore wrote:



On Fri, 11 Jun 2004 13:07:37 +0200
Luis Miguel Cruz <luismi@xxxxxxx> wrote:



Is safe to use unclean module?

--
Luis Miguel Cruz




Yes, you can discard without any problems unclean packets.




Try to add in your firewall logging rules, and you can see, which packets are rejected by firewall.





[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux