From: Tanstaafl <tanstaafl@libertytrek.org>
To: gentoo-user@lists.gentoo.org
Subject: [gentoo-user] IPtables - Mangle table - when/why do I need it (or do I need it)?
Date: Wed, 02 Jan 2013 08:38:27 -0500 [thread overview]
Message-ID: <50E43853.20203@libertytrek.org> (raw)
Hi all,
This has been bugging me for a while...
I've googled, and can't seem to find a definitive answer to this question...
Lots of references to the Mangle table, but nothing that really explains
what this table is or does, and when or why I would want/need it.
Currently, I have this in my rules (since forever, honestly don't even
remember where it came from):
*mangle
:PREROUTING ACCEPT [1378800222:449528056411]
:INPUT ACCEPT [1363738727:447358082301]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [1221121261:1103241097263]
:POSTROUTING ACCEPT [1221116979:1103240864155]
-A PREROUTING -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG
FIN,PSH,URG -j DROP
-A PREROUTING -p tcp -m tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j DROP
-A PREROUTING -p tcp -m tcp --tcp-flags SYN,RST SYN,RST -j DROP
-A PREROUTING -p tcp -m tcp --tcp-flags FIN,SYN FIN,SYN -j DROP
COMMIT
# Completed on Sun Dec 11 14:11:01 2011
This is on a mail/web server with a static IP, it does not do any NAT
and does not act as a perimeter firewall, it only protects itself...
Thanks for any pointers to tfm that explains this if there is one, or
just for a simple explanation if not...
next reply other threads:[~2013-01-02 13:40 UTC|newest]
Thread overview: 7+ messages / expand[flat|nested] mbox.gz Atom feed top
2013-01-02 13:38 Tanstaafl [this message]
2013-01-02 18:53 ` [gentoo-user] IPtables - Mangle table - when/why do I need it (or do I need it)? Michael Orlitzky
2013-01-03 3:50 ` Pandu Poluan
2013-01-02 19:01 ` Mick
2013-01-02 19:47 ` Tanstaafl
2013-01-03 0:14 ` Mick
2013-01-03 11:19 ` Tanstaafl
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=50E43853.20203@libertytrek.org \
--to=tanstaafl@libertytrek.org \
--cc=gentoo-user@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox