From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Spenst, Aleksej" Subject: AW: Why SYN-ACK packets are dropped as INVALID? Date: Thu, 26 Mar 2015 16:14:32 +0000 Message-ID: References: <201503260853.07382.neal.p.murphy@alum.wpi.edu> <405CDB4498600447A16CCC4ED3BFCAD301BE4C46C3@SCOOBY.corp.eastlink.ca> Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: <405CDB4498600447A16CCC4ED3BFCAD301BE4C46C3@SCOOBY.corp.eastlink.ca> Content-Language: de-DE Sender: netfilter-owner@vger.kernel.org List-ID: To: "netfilter@vger.kernel.org" , Joel Gerber , "neal.p.murphy@alum.wpi.edu" VGhhbmsgeW91LiBTbywgdGhlIEFDSyBudW1iZXIgaXMgY29ycmVjdC4gV2h5IGlzIHRoZW4gdGhl IHBhY2tldCBpbnZhbGlkPw0KDQotLS0tLVVyc3Byw7xuZ2xpY2hlIE5hY2hyaWNodC0tLS0tDQpW b246IEpvZWwgR2VyYmVyIFttYWlsdG86Sm9lbC5HZXJiZXJAY29ycC5lYXN0bGluay5jYV0gDQpH ZXNlbmRldDogRG9ubmVyc3RhZywgMjYuIE3DpHJ6IDIwMTUgMTQ6MjgNCkFuOiBTcGVuc3QsIEFs ZWtzZWo7IG5lYWwucC5tdXJwaHlAYWx1bS53cGkuZWR1DQpDYzogbmV0ZmlsdGVyQHZnZXIua2Vy bmVsLm9yZw0KQmV0cmVmZjogUkU6IFdoeSBTWU4tQUNLIHBhY2tldHMgYXJlIGRyb3BwZWQgYXMg SU5WQUxJRD8NCg0KVGhlIEFDSyBudW1iZXIgcmVmbGVjdHMgdGhlIGJ5dGVzIHRoYXQgeW91IGhh dmUgcHJvY2Vzc2VkIGZyb20gdGhlIHJlbW90ZSBlbmQuIFdoZW4geW91IGhhdmUgYSBUQ1AgInNp Z25hbGluZyIgZGF0YWdyYW0sIHdoaWNoIGNvbnRhaW5zIG5vIGFjdHVhbCB1c2VyIGRhdGEsIHlv dSB3aWxsIGFsd2F5cyBhZGQgMSB0byB0aGUgc2VxdWVuY2UgbnVtYmVyIG9mIHRoZSByZWNlaXZl ZCBwYWNrZXQgd2hlbiBwZXJmb3JtaW5nIGFuIEFDSy4NCg0KSm9lbCBHZXJiZXINCk5ldHdvcmsg T3BlcmF0aW9ucyBTcGVjaWFsaXN0IC0gVGVsZXBob25lIFRlbGVwaG9uZSBFYXN0bGluaw0KSm9l bC5HZXJiZXJAY29ycC5lYXN0bGluay5jYSAgICBUOiA1MTkuNzg2LjEyNDENCg0KLS0tLS1Pcmln aW5hbCBNZXNzYWdlLS0tLS0NCkZyb206IG5ldGZpbHRlci1vd25lckB2Z2VyLmtlcm5lbC5vcmcg W21haWx0bzpuZXRmaWx0ZXItb3duZXJAdmdlci5rZXJuZWwub3JnXSBPbiBCZWhhbGYgT2YgU3Bl bnN0LCBBbGVrc2VqDQpTZW50OiBNYXJjaC0yNi0xNSA5OjI1IEFNDQpUbzogbmVhbC5wLm11cnBo eUBhbHVtLndwaS5lZHU7IG5ldGZpbHRlckB2Z2VyLmtlcm5lbC5vcmcNClN1YmplY3Q6IEFXOiBX aHkgU1lOLUFDSyBwYWNrZXRzIGFyZSBkcm9wcGVkIGFzIElOVkFMSUQ/DQoNCkhpIE5lYWwsDQoN CklzIHRoaXMgY29uZmlndXJhYmxlPyBJIHRob3VnaHQgdGhlIEFDSyBudW1iZXIgaXMgYWx3YXlz IDEgZ3JlYXRlciB0aGFuIHRoZSBzZXF1ZW5jZSBudW1iZXIgb2YgdGhlIFNZTiBwYWNrZXQuIFNv LCBpbiBteSBjYXNlIHRoZSBBQ0sgc2hvd3MgdGhlIHNlcXVlbmNlIG51bWJlciBvZiB0aGUgbmV4 dCBwYWNrZXQgdGhlIGhvc3QgZXhwZWN0cyB0byByZWNlaXZlLiBJIHNlZSB0aGlzIGluIHRjcGR1 bXAgbG9ncyB3aGVuIGV2ZXJ5dGhpbmcgd29ya3MgZmluZSAodGhlIGRlc2NyaWJlZCBwcm9ibGVt IGhhcHBlbnMgb25seSBzb21ldGltZXMpLg0KDQpDYW4gaXQgYmUgdGhhdCBteSBzeXN0ZW0gc29t ZXRpbWVzIHN1ZGRlbmx5IGV4cGVjdHMgdGhhdCB0aGUgQUNLIHNob3dzIHRoZSBsYXN0IHBhY2tl dCB0aGUgaG9zdCByZWNlaXZlZCAoaW5zdGVhZCBvZiB0aGUgbmV4dCk/IA0KDQpUaGFuayB5b3Us DQpBbGVrc2VqLg0KDQoNCi0tLS0tVXJzcHLDvG5nbGljaGUgTmFjaHJpY2h0LS0tLS0NClZvbjog bmV0ZmlsdGVyLW93bmVyQHZnZXIua2VybmVsLm9yZyBbbWFpbHRvOm5ldGZpbHRlci1vd25lckB2 Z2VyLmtlcm5lbC5vcmddIEltIEF1ZnRyYWcgdm9uIE5lYWwgTXVycGh5DQpHZXNlbmRldDogRG9u bmVyc3RhZywgMjYuIE3DpHJ6IDIwMTUgMTM6NTMNCkFuOiBuZXRmaWx0ZXJAdmdlci5rZXJuZWwu b3JnDQpCZXRyZWZmOiBSZTogV2h5IFNZTi1BQ0sgcGFja2V0cyBhcmUgZHJvcHBlZCBhcyBJTlZB TElEPw0KDQpPbiBUaHVyc2RheSwgTWFyY2ggMjYsIDIwMTUgMDQ6NDE6MjEgQU0gU3BlbnN0LCBB bGVrc2VqIHdyb3RlOg0KPiBIaSBBbGwsDQo+IA0KPiBJ4oCZbSBzZW5kaW5nIFRDUCBTWU4gcGFj a2V0cyB0byB0aGUgc2VydmVyLiBUaGUgcHJvYmxlbSBpcyB0aGF0IHRoZSANCj4gU1lOLUFDSyBw YWNrZXRzIGNvbWluZyBmcm9tIHRoZSBzZXJ2ZXIgaW4gcmVzcG9uc2UgYXJlIHNvbWV0aW1lcyAN Cj4gZHJvcHBlZCBieSBteSBmaXJld2FsbCAoaXB0YWJsZXMpIGFzIElOVkFMSUQuIEkgY2Fu4oCZ dCBmaWd1cmUgb3V0IHdoeSANCj4gdGhlIGZpcmV3YWxsIHNlZXMgdGhlc2UgcGFja2V0cyBpbnZh bGlkLiBUaGV5IHNlZW0gdG8gYmUgT2suIFdoYXQgDQo+IHBhcmFtZXRlcnMgYXJlIHRha2VuIGlu dG8gYWNjb3VudCBieSB0aGUgZmlyZXdhbGwgd2hlbiBtYWtpbmcgYSANCj4gZGVjaXNpb24gYWJv dXQgaW52YWxpZGl0eSBvZiBhIHBhY2tldD8NCj4gDQo+IEV4YW1wbGUgZnJvbSB0Y3BkdW1wOg0K PiANCj4gMTk6Mjk6MjIuMDQ1MTA2ICA8bXkgSVA+ICAgICAgPFNlcnZlciBJUD4gIFRDUCAgNjA3 MTDihpI4MDgwIFtTWU5dDQo+IFNlcT0yNjQ2MTk0OTM2IFdpbj0xNDYwMCBMZW49MCBNU1M9MTQ2 MCBTQUNLX1BFUk09MSBUU3ZhbD0xMzU2OTIwIFRTZWNyPTANCj4gV1M9MTYgMTk6Mjk6MjIuODE3 ODU5ICA8U2VydmVyIElQPiAgPG15IElQPiAgICAgIFRDUCAgODA4MOKGkjYwNzEwIFtTWU4sDQo+ IEFDS10gU2VxPTM5MjA4NTYyMzMgQWNrPTI2NDYxOTQ5MzcgV2luPTY1NTM1IExlbj0wIE1TUz0x MjAwDQo+IFNBQ0tfUEVSTT0xDQo+IA0KPiBUaGUgQUNLIHNlcXVlbmNlIG51bWJlciAoQWNrPTI2 NDYxOTQ5MzcpIGlzIE9LLCBidXQgSSBzZWUgaW4gbXkgDQo+IGlwdGFibGVzIGxvZ3MgdGhhdCB0 aGlzIFNZTi1BQ0sgcGFja2V0IGlzIG1hcmtlZCBhcyBJTlZBTElEIGFuZCANCj4gZHJvcHBlZC4g V2hlbiB0aGUgU1lOLUFDSyBwYWNrZXQgY29tZXMgdGhlIFRDUCBzZXNzaW9uIGlzIGluIHRoZSBz dGF0ZSANCj4gU1lOX1NFTlQgLT4gU28sIHRoZSBzdGF0ZXMgYXJlIGFsc28gT0suIFdoeSBpcyB0 aGlzIHBhY2tldCBpbnZhbGlkIHRoZW4/DQoNCkRvZXMgdGhlIEFDSyB0ZWxsIHRoZSBwZWVyIHRo ZSBzZXF1ZW5jZSAjIG9mIHRoZSAqbmV4dCogcGFja2V0IHRoZSBob3N0IGV4cGVjdHMgdG8gcmVj ZWl2ZT8gT3IgZG9lcyBpdCBhY2tub3dsZWRnZSB0aGUgKmxhc3QqIHBhY2tldCBpdCByZWNlaXZl ZD8gSWYgdGhlIGxhdHRlciwgdGhlbiB0aGUgU1lOLUFDSyBhcyBzZW50IGlzIGludmFsaWQsIGFz IGl0IGFja25vd2xlZGdlcyBhIHBhY2tldCB0aGF0IGhhc24ndCBiZWVuIHNlbnQgeWV0Lg0KLS0N ClRvIHVuc3Vic2NyaWJlIGZyb20gdGhpcyBsaXN0OiBzZW5kIHRoZSBsaW5lICJ1bnN1YnNjcmli ZSBuZXRmaWx0ZXIiIGluIHRoZSBib2R5IG9mIGEgbWVzc2FnZSB0byBtYWpvcmRvbW9Admdlci5r ZXJuZWwub3JnIE1vcmUgbWFqb3Jkb21vIGluZm8gYXQgIGh0dHA6Ly92Z2VyLmtlcm5lbC5vcmcv bWFqb3Jkb21vLWluZm8uaHRtbA0KTiAgICAgciAgeSAgIGIgWCAgx6d2IF4gKd66ey5uICsgICB6 ICDXqyB7YXkgHcqH2pkgLGogICBmICAgaCAgIHogHiB3ICAgICAgIGo6K3YgICB3IGogbSAgICAg ICAgIHpaKyAgICAg3aJqIiAgISBpDQo=