Re: --state NEW for UDP?
>> Is there any reason why a nameserver in /etc/resolv.conf would be sending
>> me unsolicited UDP packets? The iptables rule that causes the logging is:
>The DNS didn't send you an unsolicited packet, it just answered you DNS
>query and that is a new packet (udp ist stateless).
If UDP was really stateless, NAT boxes wouldn't know where to send
that type of responses.
I don't know much about iptables. I assume it either isn't setup
right for this problem or can't be setup correctly because it's missing
a critical feature.
--
These are my opinions, not necessarily my employer's. I hate spam.
|