Re: iptables and INVALID packet filtering.

[Pascal Hambourg <pascal@plouf.fr.eu.org>]

Matthew Babcock a écrit :
> 
> 
> I know iptables -A INPUT -m state --state INVALID -j DROP works well.
> And it does pick out invalid (aka out of state) UDP packets. DNS is one
> additional example.

AFAIK, UDP packets cannot be in the INVALID state. Can you provide an
example of a UDP DNS packet in the INVALID state ?