[clug] probably a simple networking question

Eyal Lebedinsky eyal at eyal.emu.id.au
Thu Mar 9 07:41:04 UTC 2017


Now that I have a new wireless access point that has no filtering on board,
I added iptables rules for the relevant interface on my server.

My ADSL modem and the a/p are on one segment that connects to my server
on a dedicated interface. The new rules manage this interface.
My internal machines are on a separate interface on the same server, and
have no restrictions.

I noticed that from time to time I get dropped packets arrving from the 'net
that I do not expect. They seem to be from *.ytimg.com:443.

I do have the usual RELATED,ESTABLISHED rule which is supposed to manage
those so why is this not caught (ACCCEPT'ed)?

I think that these are packets belonging to a youtube I was watching,
which I just closed and it arrived after that action. If so then it is
correct to DROP them.

Is my understanding correct?

TIA

-- 
Eyal Lebedinsky (eyal at eyal.emu.id.au)



More information about the linux mailing list