Mike Mestnik wrote:
That's surprising...
It could be pkts from a non IP interface(maby your loopback?) or from a non IP
protocol? Even so
they should have been caught by your blank rule. This would seam like a
problem, one that could
be explotable. See if you can catch the pkts in question with tcpdump or the
like, that might be
helpfull.
Is there any netfilter target which redirects packets into one or more
files? An existing FILELOGGER target would be great:
iptables -P INPUT -j FILELOGGER --d-folder /slippedpackets/
Then i could change the chain policy to save these packets in an easier
way than using tcpdump...
--
Greetings
Bjoern Schmidt
