> Ok, it seems that really - someone in LAN is attacking the internet.It could be worms or viruses. In my experience every home or studentWindows network is awfully crowded with viruses. Maybe you should workon filtering your outgoing traffic. I'm not sure, but search on google what could cause ban on DIGG orYAHOO. Probably lots of connections or flood could result in banningyou from these sites. But you say that immediately when you remove theNAT rules the access is restored? I don't believe their firewalls arequick enough to restore your position two seconds after you stop being"bad" to them. Maybe something else is the reason. Anyway, do you have any output filtering rules? On Wed, Jan 7, 2009 at 11:28 AM, Artūras Šlajus <x11@xxxxxxxxxxx> wrote:> Ok, it seems that really - someone in LAN is attacking the internet.>> If I turn on forwarding for few users like me, some other computer-literate> friends - digg.com still works :))>> Now it's the question how do I catch bad guys? What should I look into?> Packet bursts? Lot's of new connections? Etc?> --> To unsubscribe from this list: send the line "unsubscribe netfilter" in> the body of a message to majordomo@xxxxxxxxxxxxxxx> More majordomo info at http://vger.kernel.org/majordomo-info.html>’ōčŗ{.nĒ+?·?®??+%?Ė’±éŻ¶„?w’ŗ{.nĒ+?·§z×ā?׫ž)ķ?ęčw*jg¬±Ø¶????Ż¢j’¾«žG«?é’¢ø¢·¦j:+v?Ø?wčjŲm¶?’žųÆł®w„ž?ąžf£¢·h??ā?ś’?Ł„