| |
| |
| |
|
Comments:
<0> is a user defined chain a valid target from the postrouting chain ? <1> yes, as long as the user defined chain is also in the same table <0> so, to create the chain, i'd say, iptables -t nat -N user_defined <0> if i was doing masq'ing, for example <1> yes <0> danieldg: thanks!
<2> gug <3> gug <4> gug <2> gugr <5> hi hidden,gandalf,octavian,rusty,jk ;) <6> LaF0rge: hi! <7> gug <7> :) <5> hi xkr. <7> hello <7> ugh, +0.81C here <8> :) <5> jk: well, it's a serious problem at this point <8> yeah, i understand.. <8> i don't have a lot of time to spend on it either though, at the moment :( <5> yes, unfortunately nobody has :( <3> Hidden: what does the "r" at the end of gugr mean? <2> Gandalf_: ask xkr47, as he's the inventor of that letter <2> Gandalf_: I think it's 'reply', btw <3> heh ok <2> Gandalf_: like ping -- pong, and gug -- gugr :) <3> or resend? <3> ah
<3> bloody HP, they can't implement ospf correctly and now they've finally given us a crappy workaround that we can't use <7> :) <3> there's too little complaining in this channel... <7> hidden was right <3> xkr47: ok <3> another one I wonder what it means is "mh" that LaF0rge sometimes uses <5> gandalf: it's not an acronym. just try to pronounce it <5> mmh. <5> a sound you (well, I at least) make even verbally when thinking about something. <3> ok, I thought it was that but wasn't sure, in swedish it's usually written hmm :) <5> gandalf: in .de it's the same. <3> the most confusing yet is the "jeje" that spanish speaking people use <3> it's "hehe" <2> Gandalf_: indeed <7> Gandalf, I use "mm" :) <7> ding dong <1> if a TCP connection has only seen packets in one direction, is it supposed to go in the conntrack table as ESTABLISHED? <3> if you have {nf,ip}_conntrack_tcp_loose set to a non-zero value it will, but it will be un***ured <3> the default value is 3 <1> ok, so what does setting it to zero do? <1> does it make those packets INVALID state? <3> yes <3> and only creates new entries on SYN packets <1> is the only reason for this entry to allow connections that were pre-existing? <3> I usually set it to 0 30min after bootup <3> yes, for example when rebooting a router <1> right. ok, thanks!
Return to
#netfilter or Go to some related
logs:
ubuntu wd4000kD #debian using linux-k7 could not establish connection to sound server ubuntu iptables --state ESTABLISHED,RELATED -j ACCEPT ubuntu device travan drive #lisp +etch or dapper vhcs dns doesn´t work #web
|
|