FW: src=localhost dst=localhost????

[Nigel Morse]

Andre Luiz de Oliveira wrote:
> thanx, i did understand, but why the state of the packets is 
> ESTABLISHED?
> and what kind of service would like to access my localhost 
> port 80?? and gets to establish a connection (according to state)?

Hmmm. Good question. The table seems to suggest an ESTABLISHED connection
that is UNREPLIED!

> tcp      6 428853 ESTABLISHED src=127.0.0.1 dst=230.231.22.1 sport=48251
dport=80 [UNREPLIED] src=230.231.22.1 dst=127.0.0.1 sport=80 dport=48251
use=1

Given that you say you are blocking all INPUT stuff, I can't see how it
would get to this (I can't think of any reason it should be ESTABLISHED and
yet UNREPLIED, doesn't seem to make sense to me - but then I can never
fathom the internals of conntrack anyway!)

Anyone else know?


Cheers
Nigel