On Mon, 2004-06-21 at 15:28, Shaun T. Erickson wrote: > Shaun T. Erickson wrote: > > > Are there any cases where iptables can be confused about what interface > > a packet came in on? Can a packet arriving on interface A ever be > > reported as arriving on interface B? > > > > I had an incident this weekend, and am trying to be certain that the > > packets came in the interface my system said it did. It's a Red Hat 9 > > system, running their stock 2.4.20-8 kernel. > > Please, can anyone answer this for me? I'm trying to prove or disprove a > theory that would explain an apparent intrusion incident over the > weekend. It's very important that I know the definitive answer to this. > Thanks. > > -ste I have never experienced it but I'm sure there are others more experienced than I on this list - John -- John A. Sullivan III Chief Technology Officer Nexus Management +1 207-985-7880 john.sullivan@xxxxxxxxxxxxx --- If you are interested in helping to develop a GPL enterprise class VPN/Firewall/Security device management console, please visit http://iscs.sourceforge.net