Re: iptables rule chain question

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Subject: Re: iptables rule chain question
From: ludi <myhapwcforever@xxxxxxxxx>
Date: Fri, 10 Feb 2006 09:47:40 +0800
In-reply-to: <20060209184200.GB4875@xxxxxxxxxxxxxxxxxxxx>
References: <20060209131739.GA4441@xxxxxxxxxxxxxxxxxxxx> <43EB4EE4.7010004@xxxxxxxxxxx> <20060209184200.GB4875@xxxxxxxxxxxxxxxxxxxx>

I think it may accept all established connection and drop all othertcp packets, such as packets made by nmap.Normal connection shouldstart with syn packet, so a first ack/rst packet may means someone isscanning your box.It's my view.Wish to help.

References:
- iptables rule chain question
  - From: Mark-Walter
- Re: iptables rule chain question
  - From: Boryan Yotov
- Re: iptables rule chain question
  - From: Mark-Walter

Prev by Date: Re: ipt -P INPUT ACCEPT problem
Next by Date: Re: Why is can't my clients use DNS?
Previous by thread: Re: iptables rule chain question
Next by thread: iptables chain name limits differ
Index(es):
- Date
- Thread

[Index of Archives] [Linux Netfilter Development] [Linux Kernel Networking Development] [Netem] [Berkeley Packet Filter] [Linux Kernel Development] [Advanced Routing & Traffice Control] [Bugtraq]

Powered by Linux