I got this in my /var/log/messages :

Apr 10 20:19:23 cerbere diald[23440]: filter ignored rule 0 proto 6 len
44 seq 1f03cfb ack 0 flags  SYN packet 192.168.0.1,64871 =>
212.27.35.195,3128

Is it good ?
Because i never put in the file "standard.filter" a rule like that.

See my "standard.filter" here :

ignore tcp ip.tot_len=40
accept tcp 180 tcp.dest=tcp.www
accept tcp 180 tcp.source=tcp.www
accept tcp 120 tcp.dest=tcp.443
accept tcp 120 tcp.source=tcp.443
accept tcp 120 tcp.dest=tcp.ftp
accept tcp 120 tcp.source=tcp.ftp
accept tcp 120 tcp.source=tcp.pop-3
accept tcp 120 tcp.dest=tcp.pop-3
accept tcp 180
ignore udp udp.dest=udp.who
ignore udp udp.source=udp.who
ignore udp udp.dest=udp.route
ignore udp udp.source=udp.route
ignore udp udp.dest=udp.ntp
ignore udp udp.source=udp.ntp
ignore udp udp.dest=udp.timed
ignore udp udp.source=udp.timed
ignore udp udp.dest=udp.domain,udp.source=udp.domain
ignore udp udp.source=udp.netbios-ns,udp.dest=udp.netbios-ns
ignore udp udp.source=udp.netbios-dgm,udp.dest=udp.netbios-dgm
accept udp 90 udp.dest=udp.domain
accept udp 90 udp.source=udp.domain
accept udp 120 any
#accept tcp 15 tcp.syn
#ignore tcp tcp.dest=tcp.domain
#ignore tcp tcp.source=tcp.domain
#keepup tcp 5 !tcp.live
#ignore tcp !tcp.live
#accept any 30 any
#ignore tcp tcp.dest=tcp.3128
#accept tcp 5 ip.tot_len=40,tcp.syn
#ignore tcp ip.tot_len=40,tcp.live


I am interested to understand this line.
Otherwise everything work find, for diald.
I use dial V 0.16 .

May be someone could give me an explanation.

Thank you.

-- 
Le Syst�me d'Exploitation Universel :                   http://www.debian.org

St�phane Abondance                      Administrateur Syst�me & R�seau

-
To unsubscribe from this list: send the line "unsubscribe linux-diald" in
the body of a message to [EMAIL PROTECTED]

Reply via email to