Connection problems on large high speed connections.

Stian B. Barmen stian at barmen.nu
Wed Apr 27 16:25:10 CEST 2005


> A "-j RECECT --reject-with tcp-reset" generates a TCP RST, which always
> kills the connection. A "-j RECECT" generates an ICMP error message, which
> - depending on the OS which receives the ICMP packet - might terminate a
> TCP connection or might not. That is the very reason why "--reject-with
> tcp-reset" is required.

Thanks for that info! :)

Best regards
Stian B. Barmen
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 2685 bytes
Desc: not available
Url : /pipermail/netfilter/attachments/20050427/4793ec0c/smime.bin


More information about the netfilter mailing list