IRC Networks
Irc Logs Stats
Start date: 2007-09-27 02:48:27
Last update: 2008-10-24 20:19:38
Channels: 41
Logged Lines: 6230436
Size: 1834.76 MB
Powered by
Channel Info
Network: freenodeChannel: #iptables |
Search in www.irclog.org
Log from #iptables at freenode 2006-07-27
[23:33]<fyguw_drgau>would complain about no static libraries (as I would expect). Strange why it
[23:33]<fyguw_drgau>sorry..
[23:33]<fyguw_drgau>ot of my reach
[23:34]<sw__>oops, i messed up some lines here, sry for that... i gonna idle for a while, thx linux_manju
[23:34]<fyguw_drgau>nproblems... Bye
[23:39]<va2w1>hey guys
[23:39]<va2w1>is anyone here
[23:47]<sw__>iptables: Unknown error 4294967295 http://rafb.net/paste/results/OafrKR95.html :/
[23:47]<fyguw_drgau>tjb13: Dont ask to ask :)
[23:49]<sw__>btw, is this the right place to tell about such problems/ where is the bugtracker and how exact should bugs be reported there?
[23:50]<va2w1>i was just wondering if you guys knew how to enable iptables to work with a nortel contivity vpn
[23:50]<fyguw_drgau>sw__: Well...
[23:50]<va2w1>i'm trying to connect
[23:51]<va2w1>and it doesn't go
[23:51]<fyguw_drgau>sw__: I would do something like this.. for that command...
[23:51]<sw__>linux_manju: lol
[23:52]<fyguw_drgau>iptables -t filter -A INPUT -i ppp0 -p tcp ! --syn -j DROP
[23:52]<fyguw_drgau>that would block any new connections
[23:53]<fyguw_drgau>and for invalid and malformed packets.. I have a userdefined chain.. which logs and drops.. with the bit status
[23:53]<sw__>/bin/sh doesn't like this "!"-thing :/
[23:53]<fyguw_drgau>sw__: doesnt it.. Lemme check .. one sec
[23:54]<fyguw_drgau>it works perfectly for me
[23:55]<fyguw_drgau>and a mistake.. If u want to block the new connetcion pls remove the ! symbol..
[23:55]<fyguw_drgau>I have a default policy of DROP.. so I have a rule like this.. to accept.. connections which rnt NEW
[23:55]<sw__>okay, i just lost the connection to my bouncer :p
[23:56]<fyguw_drgau>iptables -t filter -A INPUT -i ppp0 -p tcp ! --syn -j ACCEPT
[23:57]<sw__>so it accepts everything that is no syn-packet?
[23:57]<sw__>(is syn the first one?)
[23:57]<fyguw_drgau>yup
[23:58]<fyguw_drgau>syn is the first one
[23:58]<fyguw_drgau>First packet that will hit a TCP connection
[23:58]<sw__>so i won't loose my existing connections again :p ?







