Reputation
286
Top tag
Next privilege 300 Rep.
Create new tags
Badges
1 6
Newest
 Scholar
Impact
~13k people reached

  • 0 posts edited
  • 0 helpful flags
  • 7 votes cast
Mar
9
awarded  Scholar
Mar
9
accepted Why do iptables drop / log even if the appropriate packet should be accepted?
Mar
8
answered Why do iptables drop / log even if the appropriate packet should be accepted?
Mar
3
comment Why do iptables drop / log even if the appropriate packet should be accepted?
Thank you for your help! Yes, I can confirm, that neither endpoint's IP address nor the port changed. Yes, I'm sure that packet 624 caused the dropping. Please have a look at the question again - I added the log line and a description about the network setup.
Mar
3
revised Why do iptables drop / log even if the appropriate packet should be accepted?
Added more details about how to correlate the packets and about the network setup.
Mar
3
revised Why do iptables drop / log even if the appropriate packet should be accepted?
Added section about protocols
Mar
3
revised Why do iptables drop / log even if the appropriate packet should be accepted?
Clarified the question; added section about workarounds.
Mar
3
comment Why do iptables drop / log even if the appropriate packet should be accepted?
Thank you for your answer - but IMHO your analyze is wrong: as I said, this logging only happens if there is a lot of traffic. Also your answer does not really answer my question (it might be a bit misleading, but of course I'm interested in WHY those packets do not match the appropriate rule). Point 2 and 3 are workarounds I'm not interested in.
Mar
3
awarded  Student
Mar
2
awarded  Editor
Mar
2
revised Why do iptables drop / log even if the appropriate packet should be accepted?
Added number of bans from file2ban.
Mar
2
asked Why do iptables drop / log even if the appropriate packet should be accepted?
Apr
5
answered How to make bidirectional pipe between two programs?
Apr
5
answered Is there a way to pipe the output of one program into two other programs?
Mar
17
answered /etc/init.d/script, or /etc/inittab - respawn on die
Mar
17
answered Is it good practice to create a background job within an init script if the process can not daemonize itself?
Jan
16
awarded  Yearling
Jul
28
comment How to create a dupe of a KVM/libvirt/virt-manager VM?
This works also for copy over a VM to another host: use sftp instead of cp, (possible) change the image path before 'defining' the new vm and sftp also the that-vm.xml to the other host.
Dec
27
comment iSCSI on startup
I'm a little bit confused: Do you need the iSCSI disk for booting? Or is this 'just' something which comes later (during service startup) e.g. to add an iSCSI disk for /home?
Dec
26
comment iSCSI device mapped to different SCSI device
@GiuseppeVacanti: After re-reading your question I'm thinking about using udev for this. There are some resources about this - but I personally never tried this.