View Single Post

  #10 (permalink)  
Old 05-02-2008
AZ Nomad
 
Posts: n/a
Default Re: --state NEW for UDP?

On Fri, 02 May 2008 02:00:17 -0500, Hal Murray <hal-usenet@ip-64-139-1-69.sjc.megapath.net> wrote:

>>> Is there any reason why a nameserver in /etc/resolv.conf would be sending
>>> me unsolicited UDP packets? The iptables rule that causes the logging is:


>>The DNS didn't send you an unsolicited packet, it just answered you DNS
>>query and that is a new packet (udp ist stateless).


>If UDP was really stateless, NAT boxes wouldn't know where to send
>that type of responses.


UDP is stateless. NAT boxes using UDP broadcast their UDP packets to
everybody on the physical network.
Reply With Quote