Friday, April 05, 2013

Re: iptables and INVALID packet filtering.

Matthew Babcock a écrit :
>
>
> I know iptables -A INPUT -m state --state INVALID -j DROP works well.
> And it does pick out invalid (aka out of state) UDP packets. DNS is one
> additional example.

AFAIK, UDP packets cannot be in the INVALID state. Can you provide an
example of a UDP DNS packet in the INVALID state ?


--
To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: http://lists.debian.org/515F48D1.7090202@plouf.fr.eu.org

2 comments:

  1. Anonymous6:58 PM

    Now I am going away to do my breakfast, when having my breakfast coming again to read further news.


    my web site: Best Eye Cream REviews

    ReplyDelete
  2. Anonymous9:55 PM

    Designer purses did start to gained popularity during the in the future system of the middle ages as
    well as renaissance duration of these 16th one particular hundred year.
    When we are talking about the handbags, the majority of fashion lovers prefer
    to carry a designer handbag to match their attire. All the leatherette straps has
    been sewn within the circumference within the backpack to look after its' robustness and additionally safety.

    my web-site :: cheap handbags

    ReplyDelete