Re: INVALID state and no known connection.

To: debian-security@lists.debian.org
Cc: debian security <debian-security@lists.debian.org>
Subject: Re: INVALID state and no known connection.
From: Daniel Curtis <sidetripping@gmail.com>
Date: Wed, 10 Apr 2013 17:34:55 +0200
Message-id: <[🔎] CAASvXNtVC+vyJoRjXqbqxrDAz0JCOoZ_D5FEP3dLsbymJSnnBQ@mail.gmail.com>
In-reply-to: <[🔎] 2214718B-F125-46F1-96EA-9D81C8F74889@vianet.ca>
References: <[🔎] CAASvXNuUkXh3i1s9tW22TaPLHjGaKsP7+8ZUkhCC=XqRd1Qs_w@mail.gmail.com> <[🔎] CANHSFssDrBj=386X8yN=Joshpe2TDmTvG9NRsj5WU-JbM9hDLw@mail.gmail.com> <[🔎] CAASvXNsoNMgBg-Fg6TJFGwjq0UwC2T4nmcKz7NN=M--0TmdHQQ@mail.gmail.com> <[🔎] 20130409195137.GU26658@vzsze.de> <[🔎] 2214718B-F125-46F1-96EA-9D81C8F74889@vianet.ca>

Hi Mr Rolf

Okay, I will check these values; /proc/net/ip_conntrack etc.

Generally it is normal, that there are INVALID connections, right?

Yes, I'm seeing this syslog tag. Should I remove it from my iptables

script (e.g. -j LOG --log-prefix etc.)?

Reply to:

References:
- INVALID state and no known connection.
  - From: Daniel Curtis <sidetripping@gmail.com>
- Re: INVALID state and no known connection.
  - From: Andika Triwidada <andika@gmail.com>
- Re: INVALID state and no known connection.
  - From: Daniel Curtis <sidetripping@gmail.com>
- Re: INVALID state and no known connection.
  - From: Rolf Kutz <rk@vzsze.de>
- Re: INVALID state and no known connection.
  - From: Reid Sutherland <reid@vianet.ca>

Prev by Date: Re: INVALID state and no known connection.
Next by Date: Re: INVALID state and no known connection.
Previous by thread: Re: INVALID state and no known connection.
Next by thread: Re: INVALID state and no known connection.
Index(es):
- Date
- Thread