Mailing List Archive

ACK FIN bug
I'm investigating about the ip_conntrack ACK FIN bug.
Collecting logs I've found a very strange thing: Iìm getting back some
ack+fin packets, but I've never started this connection. I've started a
connection to pop.tiscalinet.it and get back this ACK+FIN from
mail-2.tiscalinet.it.
Very very strange, isn't it?
If someone is interested I can send the tcpdump log...

Radel
RE: ACK FIN bug [ In reply to ]
hmm, that maybe just the reverse DNS lookup - DNS can have resolve many
names to one machine - and they may want to move where pop.xxxx goes to.
Use IP's instead (-n option to tcpdump)

> -----Original Message-----
> From: Radel [mailto:netfilter@radel.yi.org]
> Sent: 06 August 2001 15:43
> To: netfilter@lists.samba.org
> Subject: ACK FIN bug
>
>
> I'm investigating about the ip_conntrack ACK FIN bug.
> Collecting logs I've found a very strange thing: Iìm getting
> back some
> ack+fin packets, but I've never started this connection. I've
> started a
> connection to pop.tiscalinet.it and get back this ACK+FIN from
> mail-2.tiscalinet.it.
> Very very strange, isn't it?
> If someone is interested I can send the tcpdump log...
>
> Radel
>
>