Hello!
On this host, TCP packets with ACK and PSH set are being rejected. The
connection itself is outgoing and should be allowed (and has been).
filter_IN_public_REJECT: IN=eth0 OUT= MAC=xyz SRC=xyz DST=xyz LEN=1258
TC=0 HOPLIMIT=46 FLOWLBL=657161 PROTO=TCP SPT=81 DPT=39720 WINDOW=501
RES=0x00 ACK PSH URGP=0
STATE_INVALID_DROP: IN=eth0 OUT= MAC=xyz SRC=xyz DST=xyz LEN=96 TC=0
HOPLIMIT=46 FLOWLBL=657161 PROTO=TCP SPT=81 DPT=39720 WINDOW=501
RES=0x00 ACK PSH FIN URGP=0
STATE_INVALID_DROP: IN=eth0 OUT= MAC=xyz SRC=xyz DST=xyz LEN=96 TC=0
HOPLIMIT=46 FLOWLBL=657161 PROTO=TCP SPT=81 DPT=39720 WINDOW=501
RES=0x00 ACK PSH FIN URGP=0
STATE_INVALID_DROP: IN=eth0 OUT= MAC=xyz SRC=xyz DST=xyz LEN=1282 TC=0
HOPLIMIT=46 FLOWLBL=777581 PROTO=TCP SPT=81 DPT=39720 WINDOW=501
RES=0x00 ACK PSH FIN URGP=0
STATE_INVALID_DROP: IN=eth0 OUT= MAC=xyz SRC=xyz DST=xyz LEN=1282 TC=0
HOPLIMIT=46 FLOWLBL=996903 PROTO=TCP SPT=81 DPT=39720 WINDOW=501
RES=0x00 ACK PSH FIN URGP=0
STATE_INVALID_DROP: IN=eth0 OUT= MAC=xyz SRC=xyz DST=xyz LEN=1282 TC=0
HOPLIMIT=46 FLOWLBL=394473 PROTO=TCP SPT=81 DPT=39720 WINDOW=501
RES=0x00 ACK PSH FIN URGP=0
STATE_INVALID_DROP: IN=eth0 OUT= MAC=xyz SRC=xyz DST=xyz LEN=60 TC=192
HOPLIMIT=63 FLOWLBL=0 PROTO=TCP SPT=81 DPT=39720 WINDOW=507 RES=0x00 RST
URGP=0
Is that intended or is that an issue in the connection tracking?
The connection itself does not exist anymore, so I cannot check it in
that case.
--
kind regards
Marco
Junk-Mail bitte an trashcan(a)stinkedores.dorfdsl.de
