* TFTP conntrack research.
@ 2014-06-27 9:05 megacrabogoahell .
2014-06-27 9:55 ` Pascal Hambourg
0 siblings, 1 reply; 2+ messages in thread
From: megacrabogoahell . @ 2014-06-27 9:05 UTC (permalink / raw)
To: netfilter
I'm researching the stateful FW. I've got an interesing situation of
how does the TFTP passes FW rules. It's clear to me how does
nf_conntrack_tftp works. But could you please answer me, how many
sessions does the TFTP transfer requiers?
I mean, when the client asks server for a transfer with WRQ or RRQ,
the src ip/port and dst ip/port are not same when tftp reply came back
to the client. Does this packet belongs to the session of 1st
packet(RQ creates NEW session, and then it goes as ESTABLISHED?), or
it belongs to the new session.
Thank you so much.
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: TFTP conntrack research.
2014-06-27 9:05 TFTP conntrack research megacrabogoahell .
@ 2014-06-27 9:55 ` Pascal Hambourg
0 siblings, 0 replies; 2+ messages in thread
From: Pascal Hambourg @ 2014-06-27 9:55 UTC (permalink / raw)
To: megacrabogoahell .; +Cc: netfilter
Hello,
megacrabogoahell . a écrit :
> I'm researching the stateful FW. I've got an interesing situation of
> how does the TFTP passes FW rules. It's clear to me how does
> nf_conntrack_tftp works. But could you please answer me, how many
> sessions does the TFTP transfer requiers?
> I mean, when the client asks server for a transfer with WRQ or RRQ,
> the src ip/port and dst ip/port are not same when tftp reply came back
> to the client. Does this packet belongs to the session of 1st
> packet(RQ creates NEW session, and then it goes as ESTABLISHED?), or
> it belongs to the new session.
The data tranfer creates a RELATED connection.
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2014-06-27 9:55 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2014-06-27 9:05 TFTP conntrack research megacrabogoahell .
2014-06-27 9:55 ` Pascal Hambourg
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.