holm/shorewall_code
1
0
Fork 0
forked from extern/shorewall_code
Code Pull Requests Activity

Add note about ISPs blocking SYN,ACK

Browse Source 
git-svn-id: https://shorewall.svn.sourceforge.net/svnroot/shorewall/trunk@5094 fbd18981-670d-0410-9b5c-8dc0c1a9a2bb
This commit is contained in:
teastep 2006-12-11 15:57:41 +00:00
parent 9d431a0292
commit 84dd22a4eb
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
docs/FAQ.xml
View File

@ -253,6 +253,15 @@ DNAT net:<emphasis>&lt;address&gt;</emphasis> loc:&lt;l<emphasis>ocal IP addr
matches OUT=&lt;dev&gt; and DEST= &lt;ip&gt;from the REJECT/DROP matches OUT=&lt;dev&gt; and DEST= &lt;ip&gt;from the REJECT/DROP
log message.</para> log message.</para>
</listitem> </listitem>
<listitem>
<para>If everything seems to be correct according to these tests
but the connection doesn't work, it may be that your ISP is
blocking SYN,ACK responses. This technique allows your ISP to
detect when you are running a server (in violation of your service
agreement) and to stop connections to that server from being
established. </para>
</listitem>
</itemizedlist> </itemizedlist>
</section> </section>