Mike -- In following this thread, it occurs to me that people have been dancing around the actual question you asked, but not addressing it head on.
You originally asked: At 04:09 PM 4/12/02 -0400, Mike Sussman wrote: [...] >message this afternoon and that my computer recognized it as related to >last night's ssh session. If that interpretation is true, HOW DID THE MESSAGE >GET THROUGH THE DACHSTEIN FIREWALL? I have no ports opened. [...] Presumably it got through because it was a message on an established connection. The message may be (almost surely is) due to a bad configuration at the remote end, but that wasn't your original question. Concerning it ... everyone has been discussing how, from the viewpoint of the host workstation, you terminated the connection properly. But what about from the PoV of the firewall? NAT'ing firewalls don't really know when NAT'd connections are terminated. So they use a substitute ... terminate any NAT that has had no traffic for a specified time. You specify this via "ipchains -M" (or its equivalent for other kernel revs). I don't know offhand what idle time Dachstein defaults to, or if you've changed it in your setup. But if it is a long idle time, the message could be getting through because from the firewall's viewpoint, the NAT-table entry hasn't timed out yet. Of course, for this to work, something also has to be still listening on that port on the workstation. The way to check for that is with "netstat -l" or any of several variants of the netstat command. -- ------------------------------------"Never tell me the odds!"--- Ray Olszewski -- Han Solo Palo Alto, CA [EMAIL PROTECTED] ---------------------------------------------------------------- _______________________________________________ Leaf-user mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user
