Re: iptables reject with TCP RST

["Tom Reed" <tom@dkinbox.com>]

>
> so whatever your 193.106.250.x host is, maybe it did indeed block
> the packets itself, but would be good to verify.
>

Hello

I have checked for details but didn't get the luck.

My destination host does have the rules:

REJECT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:993
reject-with tcp-reset
REJECT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:143
reject-with tcp-reset
REJECT     tcp  --  0.0.0.0/0            0.0.0.0/0            tcp dpt:587
reject-with tcp-reset


And I telnet from two different DCs (one is Dallas, another is LA), both
got timeout, rather than the expected disconnection quickly.

$ telnet 193.106.250.86 587
Trying 193.106.250.86...
telnet: Unable to connect to remote host: Connection timed out


If I clean iptables in the destination host, this telnet will get success
at once.

Any hints?

Thanks.


-- 
sent from https://dkinbox.com/