Am Montag den, 25. Februar 2002, um 21:38, schrieb Ramin Alidousti:
> This icmp sss.ttt.uuu.vvv -> aaa.bbb.ccc.ddd should be > related to tcp aaa.bbb.ccc.ddd -> www.xxx.yyy.zzz. > > I don't know whethere it's important to have '--state RELATED' > somewhere in your previous rules to catch this (I doubt it as I first check for --state INVALID . Check for --state ESTABLISHED,RELATED comes later. I did some further investigation and found: 22:38:02.330687 some.host > my.host: icmp: host other.host unreachable - admin prohibited filter for my.host > other.host: (frag 59960:60@512) (ttl 48, len 80, bad cksum d20a!) (DF) (ttl 239, id 9929, len 56) Seems that my.host (a Linux 2.4.10 box) creates bad checksums? Axel Computing @ Chaos Claudius -Motivation by consistency: Cocoa Axel Rau, Frankfurt, Germany Phone:49-69-951418-0, Fax: -55 email:[EMAIL PROTECTED],Mime ok,MS-Word-documents only as HTML >> >
