[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: iptables and INVALID packet filtering.

Matthew Babcock a écrit :
> I know iptables -A INPUT -m state --state INVALID -j DROP works well.
> And it does pick out invalid (aka out of state) UDP packets. DNS is one
> additional example.

AFAIK, UDP packets cannot be in the INVALID state. Can you provide an
example of a UDP DNS packet in the INVALID state ?

Reply to: