Re: IPtables and Connection Tracking

2002-04-27 Thread vdongen 

 Does the connection tracking hold the connections even if the
 firewall
 was flushed?
 
 If it is so, is it a bug or a feature?
did you by chance forget to flush all tables and just flushed by doing 
iptables -F ???

Gr,

Ivo



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: IPtables and Connection Tracking

2002-04-27 Thread vdongen 
 Does the connection tracking hold the connections even if the
 firewall
 was flushed?
 
 If it is so, is it a bug or a feature?
did you by chance forget to flush all tables and just flushed by doing 
iptables -F ???

Gr,

Ivo



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]

Re: IPtables and Connection Tracking

2002-04-27 Thread martin f krafft 
also sprach vdongen [EMAIL PROTECTED] [2002.04.27.1812 +0200]:
  Does the connection tracking hold the connections even if the
  firewall
  was flushed?
  
  If it is so, is it a bug or a feature?
 did you by chance forget to flush all tables and just flushed by doing 
 iptables -F ???

i have noticed behaviour like this before. on a machine doing PAT
(masquerading), an /etc/init.d/iptables clear would not disrupt
existing connections. that was kind of astonishing to see... can't say
whether it's a bug or a feature, but it doesn't look very harmful...

-- 
martin;  (greetings from the heart of the sun.)
  \ echo mailto: !#^.*|tr * mailto:; [EMAIL PROTECTED]
  
scintillation is not always identification for an auric substance.


pgpt4kKdKpRLO.pgp
Description: PGP signature

IPtables and Connection Tracking

2002-04-26 Thread Thorsten Kruschel 
Hi,

today I saw something mysterious with IPtables. I had a little mistake
in my script. To test the funktionality. i pinged a host in the www and
changed then the wrong entries in my script. I looked with tcpdump if
the ping becomes a reply. But erverything i've done, no reply came back.

Then i pinged from another maschine in the same subnet and i've become a
reply.

Does the connection tracking hold the connections even if the firewall
was flushed?

If it is so, is it a bug or a feature?

Thanks to all

Thorsten




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]