FW: src=localhost dst=localhost????
Thu, 19 Jul 2001 15:49:28 +0100
Andre Luiz de Oliveira wrote:
> thanx, i did understand, but why the state of the packets is
> and what kind of service would like to access my localhost
> port 80?? and gets to establish a connection (according to state)?
Hmmm. Good question. The table seems to suggest an ESTABLISHED connection
that is UNREPLIED!
> tcp 6 428853 ESTABLISHED src=127.0.0.1 dst=126.96.36.199 sport=48251
dport=80 [UNREPLIED] src=188.8.131.52 dst=127.0.0.1 sport=80 dport=48251
Given that you say you are blocking all INPUT stuff, I can't see how it
would get to this (I can't think of any reason it should be ESTABLISHED and
yet UNREPLIED, doesn't seem to make sense to me - but then I can never
fathom the internals of conntrack anyway!)
Anyone else know?