Re: --state NEW for UDP?
On Fri, 02 May 2008 02:00:17 -0500, Hal Murray <hal-usenet@ip-64-139-1-69.sjc.megapath.net> wrote:
>>> Is there any reason why a nameserver in /etc/resolv.conf would be sending
>>> me unsolicited UDP packets? The iptables rule that causes the logging is:
>>The DNS didn't send you an unsolicited packet, it just answered you DNS
>>query and that is a new packet (udp ist stateless).
>If UDP was really stateless, NAT boxes wouldn't know where to send
>that type of responses.
UDP is stateless. NAT boxes using UDP broadcast their UDP packets to
everybody on the physical network.
|