by default, ipchains-ul rejecteaza tot icmp-ul cand ii dai -p icmp -j DENY netsaintul poate e destul de destept incat sa trimita pachete tcp fara nici un flag setat, pe porturi inchise (0 like) si sa vada dc ii vine ceva inapoi. Porneste un tcpdump pe masina destinatie si o sa vezi singur cum sta treaba. Anyway, netsaint sucks big time! (parere autorizata ;)
----- Original Message ----- From: "Baba Bogdan" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, April 10, 2002 7:02 PM Subject: [rlug] netsaint crazy > daca dai reject si la type 3 pakets vezi daca mai zice ca, masina is up > ... > > > Baba Bogdan > > Sys Admin > CDS NETWORK, Corpus Christi, TX, USA > CAD Data Systems, Cluj-Napoca, Romania > --------------------------------o0()()0o------------------------------- > We can forgive a child who is afraid of the dark; the real tragedy of life > is when men are afraid of the light. > - Plato > > > > On Wed, 10 Apr 2002, marian wrote: > > > $subj face verificarea periodica > > a unui server cu ping > > Pt testare am rejectat pingurile > > (primirea pingurilor pe serverul > > de urmarit) cu > > ipchains -A input -p 1 -j DENY > > cand dau ping de pe serverul > > care ruleaza netsaint spre serv > > ce urmeaza a fii verificat nu se > > intoarce nici un pachet, > > deci regula de ipchains e buna > > si totusi netsaintul zice ca > > host is UP > > Question: unde gresesc? are > > netsaint un mod de a trimite > > ping care trece de ipchainsul > > meu? > > (am verificat IP hostului in fis > > de configurare) > > > > > > --- > > <a href="mailto:[EMAIL PROTECTED]?Subject=unsubscribe%20rlug";>unsubscribe</a> > > > > REGULI, arhive si alte informatii: http://www.lug.ro/mlist/ > > > > > > --- > <a href="mailto:[EMAIL PROTECTED]?Subject=unsubscribe%20rlug";>unsubscribe</a> > > REGULI, arhive si alte informatii: http://www.lug.ro/mlist/ > > > --- <a href="mailto:[EMAIL PROTECTED]?Subject=unsubscribe%20rlug";>unsubscribe</a> REGULI, arhive si alte informatii: http://www.lug.ro/mlist/
