Netfilter 连接跟踪旨在将某些数据包标识为与 conntrack 条目“相关”。
我正在寻找有关 ICMP 和 ICMPv6 错误数据包的 TCP 和 UDP conntrack 条目的完整详细信息。
针对 IPv6 防火墙,RFC 4890 清楚地描述了不应丢弃的 ICMPv6 数据包
http://www.ietf.org/rfc/rfc4890.txt
4.3.1. 不能丢弃的流量
对建立和维护通信至关重要的错误消息:
Run Code Online (Sandbox Code Playgroud)Destination Unreachable (Type 1) - All codes Packet Too Big (Type 2) Time Exceeded (Type 3) - Code 0 only Parameter Problem (Type 4) - Codes 1 and 2 only Appendix A.4 suggests some more specific checks that could be performed on Parameter Problem messages if a firewall has the
必要的数据包检测能力。
Run Code Online (Sandbox Code Playgroud)Connectivity checking messages: Echo …
两小时前我尝试手动更新软件包。InRelease 确实从我的镜像http://ftp.fr.debian.org/debian/dists/stretch/InRelease中丢失,但 CDN 中也丢失了http://deb.debian.org/debian/dists/stretch/在发布中。
预计该 InRelease 文件会因拉伸而丢失吗?
me@stretch:~$ LANG=C sudo apt update
Err:1 http://ftp.fr.debian.org/debian stretch InRelease
Temporary failure resolving 'ftp.fr.debian.org'
Err:2 http://security.debian.org/debian-security stretch/updates InRelease
Temporary failure resolving 'security.debian.org'
Err:3 http://ftp.fr.debian.org/debian stretch-updates InRelease
Temporary failure resolving 'ftp.fr.debian.org'
Reading package lists... Done
Building dependency tree
Reading state information... Done
All packages are up to date.
W: Failed to fetch http://ftp.fr.debian.org/debian/dists/stretch/InRelease Temporary failure resolving 'ftp.fr.debian.org'
W: Failed to fetch http://security.debian.org/debian-security/dists/stretch/updates/InRelease Temporary failure resolving 'security.debian.org'
W: Failed to fetch http://ftp.fr.debian.org/debian/dists/stretch-updates/InRelease …
Run Code Online (Sandbox Code Playgroud)