Исходное сообщение
"iptables съел мозг" Отправлено Alexander, 21-Окт-08 14:24
сейчас провел эксперимент: на 10.4.1.43 сгенерировал с помощью hping 1 tcp пакет, идентичный по параметрам пакетам с 10.4.1.1: hping 81.19.70.13 -c 1 -V -t 255 -N 65259 -H 6 -s 22653 -p 80 -w 32768 -M 3154278569 -R -d 40 using eth1:1, addr: 10.4.1.43, MTU: 1500 HPING 81.19.70.13 (eth1:1 81.19.70.13): R set, 40 headers + 40 data bytes --- 81.19.70.13 hping statistic --- 1 packets tramitted, 0 packets received, 100% packet loss round-trip min/avg/max = 0.0/0.0/0.0 ms и он не занатился: # tcpdump -e -X -s 0 -n -vv -i eth0 host 10.4.1.43 tcpdump: listening on eth0, link-type EN10MB (Ethernet), capture size 65535 bytes 14:19:59.107989 00:15:17:38:d5:22 > 00:30:4f:51:1f:f3, ethertype IPv4 (0x0800), length 94: IP (tos 0x0, ttl 254, id 65259, offset 0, flags [none], proto 6, length: 80) 10.4.1.43.22653 > 81.19.70.13.80: R [tcp sum ok] 3154278569:3154278609(40) win 32768 [RST+ XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX]         0x0000:  4500 0050 feeb 0000 fe06 1b6d 0a04 012b  E..P.......m...+         0x0010:  5113 460d 587d 0050 bc02 78a9 573f d208  Q.F.X}.P..x.W?..         0x0020:  5004 8000 efc0 0000 5858 5858 5858 5858  P.......XXXXXXXX         0x0030:  5858 5858 5858 5858 5858 5858 5858 5858  XXXXXXXXXXXXXXXX         0x0040:  5858 5858 5858 5858 5858 5858 5858 5858  XXXXXXXXXXXXXXXX