Re: netfilter expected behavior for established connections

Antonio Ojea <[email protected]>
Newsgroups gmane.comp.security.firewalls.netfilter.general
Message-ID <CABhP=tYqdXgQrAMUJu8KYvh3krsTtyR-foxY201wtRojjMOaqg@mail.gmail.com> 
> I tcpdumped to verify the behavior, but let me work on it and use a
> different approach that is not so racy and random, I just wanted to
> validate my assumption on the expected behavior

There were also other bugs in this patch so please disregard it.
I submitted a new one in
https://lore.kernel.org/netfilter-devel/[email protected]/T/#u

I also realized that I need to use "reject with tcp reset" to close
the established connection, rejecting ICMP messages does not seem to
have any effect over established connections.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.