小编Str*_*ian的帖子

netfilter TCP/UDP conntrack RELATED state with ICMP / ICMPv6

Netfilter 连接跟踪旨在将某些数据包标识为与 conntrack 条目“相关”。

我正在寻找有关 ICMP 和 ICMPv6 错误数据包的 TCP 和 UDP conntrack 条目的完整详细信息。

针对 IPv6 防火墙,RFC 4890 清楚地描述了不应丢弃的 ICMPv6 数据包

http://www.ietf.org/rfc/rfc4890.txt

4.3.1. 不能丢弃的流量

对建立和维护通信至关重要的错误消息:

Destination Unreachable (Type 1) - All codes

Packet Too Big (Type 2)

Time Exceeded (Type 3) - Code 0 only

Parameter Problem (Type 4) - Codes 1 and 2 only

Appendix A.4 suggests some more specific checks that could be performed on Parameter Problem messages if a firewall has the
Run Code Online (Sandbox Code Playgroud)

必要的数据包检测能力。

Connectivity checking messages:

Echo …
Run Code Online (Sandbox Code Playgroud)

linux networking firewall

7
推荐指数
1
解决办法
1247
查看次数

延伸 apt 更新失败,镜像上缺少 InRelease 文件

两小时前我尝试手动更新软件包。InRelease 确实从我的镜像http://ftp.fr.debian.org/debian/dists/stretch/InRelease中丢失,但 CDN 中也丢失了http://deb.debian.org/debian/dists/stretch/在发布中

预计该 InRelease 文件会因拉伸而丢失吗?

me@stretch:~$ LANG=C sudo apt update
Err:1 http://ftp.fr.debian.org/debian stretch InRelease
  Temporary failure resolving 'ftp.fr.debian.org'
Err:2 http://security.debian.org/debian-security stretch/updates InRelease
  Temporary failure resolving 'security.debian.org'
Err:3 http://ftp.fr.debian.org/debian stretch-updates InRelease
  Temporary failure resolving 'ftp.fr.debian.org'
Reading package lists... Done
Building dependency tree       
Reading state information... Done
All packages are up to date.
W: Failed to fetch http://ftp.fr.debian.org/debian/dists/stretch/InRelease  Temporary failure resolving 'ftp.fr.debian.org'
W: Failed to fetch http://security.debian.org/debian-security/dists/stretch/updates/InRelease  Temporary failure resolving 'security.debian.org'
W: Failed to fetch http://ftp.fr.debian.org/debian/dists/stretch-updates/InRelease …
Run Code Online (Sandbox Code Playgroud)

debian

5
推荐指数
2
解决办法
1万
查看次数

标签 统计

debian ×1

firewall ×1

linux ×1

networking ×1