From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Spenst, Aleksej" Subject: AW: Why SYN-ACK packets are dropped as INVALID? Date: Thu, 26 Mar 2015 13:25:00 +0000 Message-ID: References: <201503260853.07382.neal.p.murphy@alum.wpi.edu> Mime-Version: 1.0 Content-Transfer-Encoding: base64 Return-path: In-Reply-To: <201503260853.07382.neal.p.murphy@alum.wpi.edu> Content-Language: de-DE Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="windows-1254" To: "neal.p.murphy@alum.wpi.edu" , "netfilter@vger.kernel.org" SGkgTmVhbCwNCg0KSXMgdGhpcyBjb25maWd1cmFibGU/IEkgdGhvdWdodCB0aGUgQUNLIG51bWJl ciBpcyBhbHdheXMgMSBncmVhdGVyIHRoYW4gdGhlIHNlcXVlbmNlIG51bWJlciBvZiB0aGUgU1lO IHBhY2tldC4gU28sIGluIG15IGNhc2UgdGhlIEFDSyBzaG93cyB0aGUgc2VxdWVuY2UgbnVtYmVy IG9mIHRoZSBuZXh0IHBhY2tldCB0aGUgaG9zdCBleHBlY3RzIHRvIHJlY2VpdmUuIEkgc2VlIHRo aXMgaW4gdGNwZHVtcCBsb2dzIHdoZW4gZXZlcnl0aGluZyB3b3JrcyBmaW5lICh0aGUgZGVzY3Jp YmVkIHByb2JsZW0gaGFwcGVucyBvbmx5IHNvbWV0aW1lcykuDQoNCkNhbiBpdCBiZSB0aGF0IG15 IHN5c3RlbSBzb21ldGltZXMgc3VkZGVubHkgZXhwZWN0cyB0aGF0IHRoZSBBQ0sgc2hvd3MgdGhl IGxhc3QgcGFja2V0IHRoZSBob3N0IHJlY2VpdmVkIChpbnN0ZWFkIG9mIHRoZSBuZXh0KT8gDQoN ClRoYW5rIHlvdSwNCkFsZWtzZWouDQoNCg0KLS0tLS1VcnNwcsO8bmdsaWNoZSBOYWNocmljaHQt LS0tLQ0KVm9uOiBuZXRmaWx0ZXItb3duZXJAdmdlci5rZXJuZWwub3JnIFttYWlsdG86bmV0Zmls dGVyLW93bmVyQHZnZXIua2VybmVsLm9yZ10gSW0gQXVmdHJhZyB2b24gTmVhbCBNdXJwaHkNCkdl c2VuZGV0OiBEb25uZXJzdGFnLCAyNi4gTcOkcnogMjAxNSAxMzo1Mw0KQW46IG5ldGZpbHRlckB2 Z2VyLmtlcm5lbC5vcmcNCkJldHJlZmY6IFJlOiBXaHkgU1lOLUFDSyBwYWNrZXRzIGFyZSBkcm9w cGVkIGFzIElOVkFMSUQ/DQoNCk9uIFRodXJzZGF5LCBNYXJjaCAyNiwgMjAxNSAwNDo0MToyMSBB TSBTcGVuc3QsIEFsZWtzZWogd3JvdGU6DQo+IEhpIEFsbCwNCj4gDQo+IEnigJltIHNlbmRpbmcg VENQIFNZTiBwYWNrZXRzIHRvIHRoZSBzZXJ2ZXIuIFRoZSBwcm9ibGVtIGlzIHRoYXQgdGhlIA0K PiBTWU4tQUNLIHBhY2tldHMgY29taW5nIGZyb20gdGhlIHNlcnZlciBpbiByZXNwb25zZSBhcmUg c29tZXRpbWVzIA0KPiBkcm9wcGVkIGJ5IG15IGZpcmV3YWxsIChpcHRhYmxlcykgYXMgSU5WQUxJ RC4gSSBjYW7igJl0IGZpZ3VyZSBvdXQgd2h5IA0KPiB0aGUgZmlyZXdhbGwgc2VlcyB0aGVzZSBw YWNrZXRzIGludmFsaWQuIFRoZXkgc2VlbSB0byBiZSBPay4gV2hhdCANCj4gcGFyYW1ldGVycyBh cmUgdGFrZW4gaW50byBhY2NvdW50IGJ5IHRoZSBmaXJld2FsbCB3aGVuIG1ha2luZyBhIA0KPiBk ZWNpc2lvbiBhYm91dCBpbnZhbGlkaXR5IG9mIGEgcGFja2V0Pw0KPiANCj4gRXhhbXBsZSBmcm9t IHRjcGR1bXA6DQo+IA0KPiAxOToyOToyMi4wNDUxMDYgIDxteSBJUD4gICAgICA8U2VydmVyIElQ PiAgVENQICA2MDcxMOKGkjgwODAgW1NZTl0NCj4gU2VxPTI2NDYxOTQ5MzYgV2luPTE0NjAwIExl bj0wIE1TUz0xNDYwIFNBQ0tfUEVSTT0xIFRTdmFsPTEzNTY5MjAgVFNlY3I9MA0KPiBXUz0xNiAx OToyOToyMi44MTc4NTkgIDxTZXJ2ZXIgSVA+ICA8bXkgSVA+ICAgICAgVENQICA4MDgw4oaSNjA3 MTAgW1NZTiwNCj4gQUNLXSBTZXE9MzkyMDg1NjIzMyBBY2s9MjY0NjE5NDkzNyBXaW49NjU1MzUg TGVuPTAgTVNTPTEyMDAgDQo+IFNBQ0tfUEVSTT0xDQo+IA0KPiBUaGUgQUNLIHNlcXVlbmNlIG51 bWJlciAoQWNrPTI2NDYxOTQ5MzcpIGlzIE9LLCBidXQgSSBzZWUgaW4gbXkgDQo+IGlwdGFibGVz IGxvZ3MgdGhhdCB0aGlzIFNZTi1BQ0sgcGFja2V0IGlzIG1hcmtlZCBhcyBJTlZBTElEIGFuZCAN Cj4gZHJvcHBlZC4gV2hlbiB0aGUgU1lOLUFDSyBwYWNrZXQgY29tZXMgdGhlIFRDUCBzZXNzaW9u IGlzIGluIHRoZSBzdGF0ZSANCj4gU1lOX1NFTlQgLT4gU28sIHRoZSBzdGF0ZXMgYXJlIGFsc28g T0suIFdoeSBpcyB0aGlzIHBhY2tldCBpbnZhbGlkIHRoZW4/DQoNCkRvZXMgdGhlIEFDSyB0ZWxs IHRoZSBwZWVyIHRoZSBzZXF1ZW5jZSAjIG9mIHRoZSAqbmV4dCogcGFja2V0IHRoZSBob3N0IGV4 cGVjdHMgdG8gcmVjZWl2ZT8gT3IgZG9lcyBpdCBhY2tub3dsZWRnZSB0aGUgKmxhc3QqIHBhY2tl dCBpdCByZWNlaXZlZD8gSWYgdGhlIGxhdHRlciwgdGhlbiB0aGUgU1lOLUFDSyBhcyBzZW50IGlz IGludmFsaWQsIGFzIGl0IGFja25vd2xlZGdlcyBhIHBhY2tldCB0aGF0IGhhc24ndCBiZWVuIHNl bnQgeWV0Lg0KLS0NClRvIHVuc3Vic2NyaWJlIGZyb20gdGhpcyBsaXN0OiBzZW5kIHRoZSBsaW5l ICJ1bnN1YnNjcmliZSBuZXRmaWx0ZXIiIGluIHRoZSBib2R5IG9mIGEgbWVzc2FnZSB0byBtYWpv cmRvbW9Admdlci5rZXJuZWwub3JnIE1vcmUgbWFqb3Jkb21vIGluZm8gYXQgIGh0dHA6Ly92Z2Vy Lmtlcm5lbC5vcmcvbWFqb3Jkb21vLWluZm8uaHRtbA0K