Steve Ladewig wrote: > Tom Eastep said the following, On 02/03/2009 09:52 AM:
>> Then you will have to use Wireshark and see what the packets that you >> are receiving look like. > > > I see the pattern at offset 30 but the rule misses it. > 10:05:44.057686 IP 76.9.16.171.63109 > 64.108.225.55.domain: 15117+ NS? > . (17) > 0x0000: 4500 002d c775 0000 3411 40f3 4c09 10ab > 0x0010: 406c e137 f685 0035 0019 4b9b 3b0d 0100 > 0x0020: 0001 0000 0000 0000 0000 0200 0100 > > If I change the offset back 1 byte to 29 the rule does work. Thanks for the update. I've changed the code on the primary web site to check 29 through 31. That change will percolate out to the mirrors over the next several hours. I assume that this reflects differences between Netfilter versions; sigh. -Tom -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________
signature.asc
Description: OpenPGP digital signature
------------------------------------------------------------------------------ Create and Deploy Rich Internet Apps outside the browser with Adobe(R)AIR(TM) software. With Adobe AIR, Ajax developers can use existing skills and code to build responsive, highly engaging applications that combine the power of local resources and data with the reach of the web. Download the Adobe AIR SDK and Ajax docs to start building applications today-http://p.sf.net/sfu/adobe-com
_______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
