GNAT Box Pro Version: 3.1.3s / Intel P166 MMX 64mb ram

2002-04-12 21:30:28 FILTER: Remote access filter blocks: TCP ed0
[217.128.119.159/6346]->[65.187.137.49/15647] l=0 f=0x12.
2002-04-12 21:30:16 FILTER: Remote access filter blocks: TCP ed0
[217.128.119.159/6346]->[65.187.137.49/15647] l=0 f=0x12.
2002-04-12 21:29:36 FILTER: Remote access filter blocks: TCP ed0
[217.128.119.159/6346]->[65.187.137.49/15647] l=0 f=0x10.

2002-04-12 20:29:40 FILTER: Remote access filter blocks: TCP ed0
[65.186.41.245/6346]->[65.187.137.49/11405] l=1322 f=0x18.

Assuming I am reading the flags right, the first group is ack/0x10,
syn+ack/0x12, syn+ack/0x12 and the last is ack+push/0x18? The first
three should be dropped without logging and the last should be passed;
so would it be better to pass all or block/nolog all? Or rather than
that approach, would it be better to increase "Wait for ACK" and "Wait
for close" from the defaults of 30 and 20 seconds respectively (under
NAT Timeouts)? Any suggestions as to values for either setting or an
upper limit that shouldn't be passed?

I'd also appreciate any comments from those that allow users to
download from gnutella hosts and their setup.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
To subscribe to the digest version first unsubscribe, then
 e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archive of the last 1000 messages:
 http://www.mail-archive.com/[email protected]

Reply via email to