[Bug 66] INPUT REJECT target needs state creation in OUTPUT

bugzilla-daemon@netfilter.org bugzilla-daemon@netfilter.org
Sun, 30 Mar 2003 21:12:12 +0200


https://bugzilla.netfilter.org/cgi-bin/bugzilla/show_bug.cgi?id=66

laforge@netfilter.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID



------- Additional Comments From laforge@netfilter.org  2003-03-30 21:12 -------
the TCP RST packet is (like ICMP error messages sent by REJECT) marked as RELATED.

I'm a bit undecided whether we should mark it ESTABLISHED because it behaves
like a TCP stack at one end of a connection, or if we should mark it RELATED
because all packets generated by REJECT are RELATED.

Any way we chose, it will be inconsistent with something.

So I think we will keep the current behaviour and have it marked RELATED.




------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.