Re: aggressive firewalling via nftables

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Mon, Jan 6, 2025, at 11:27, potatojuggler@xxxxxxx wrote:
> Things like QUIC should work as well, since the TCP handshake goes 
> through, and the UDP traffic afterwards should be allowed by "ct state 
> established, related accept" in the main file (not tested).

A small clarification: QUIC does not use TCP at all, not even for an initial handshake. It is entirely UDP-based.




[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux