Constantin Gavrilescu wrote:

>
>http://iptables-tutorial.frozentux.net/iptables-tutorial.html#MANGLETABLE
>
> You are strongly advised not to use this table for any filtering; nor 
>will any DNAT, SNAT or Masquerading work in this table.
>
>Targets that are only valid in the mangle table:
>
>    *    TOS
>    *    TTL
>    *    MARK
>  
>
Gresit sau nu, un DROP in -t mangle te scuteste de scuteste in cazul syn 
flood-ului de mii de inregistrari in conntrack .
Nu uita ca si acel tutorial a fost scris de un om care este supus 
greselii, ca noi toti.

--- 
Detalii despre listele noastre de mail: http://www.lug.ro/


Raspunde prin e-mail lui