Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #2755

Re: can't access a service to a remate hosts

Show all headers | View raw

Tauno Voipio a écrit :
> On 23.2.14 20:50, Pascal Hambourg wrote:
>>
>>> The 10.x.y.z are RFC1918 private addresses, which can mean
>>> different hosts in different local networks. If the routers
>>> obey the RFC's, they must not forward the 10 -series addresses
>>> if there is any hop in the public network.
>> Agreed, but then they should not reply with a TCP RST, should they ?
> 
> That's right, but it is prefectly correct to have a host
> with the targeted IP in the network he's attempting access
> from, so the SYN segment goes to a completely different
> host the OP is targeting.
> 
> There is a clue in this direction in the trace he posted:
> the RST comes from the address he wants to connect to, but
> without the router hops he claims there are.

Unlike ICMP errors, a TCP RST always appears to come from the target
address, even when sent by an intermediate firewall. Otherwise the
original sender would not accept it.

> The RST comes from an unprepared host or from a firewall
> which is configured to assassin TCP to unallowed ports.

Not from the expected destination host, anyway.

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

can't access a service to a remate hosts xeon Mailinglist <xeonmailinglist@gmail.com> - 2014-02-23 06:30 -0800
  Re: can't access a service to a remate hosts Ulf Volmer <u.volmer@u-v.de> - 2014-02-23 15:39 +0100
    Re: can't access a service to a remate hosts xeon Mailinglist <xeonmailinglist@gmail.com> - 2014-02-23 06:55 -0800
      Re: can't access a service to a remate hosts Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2014-02-23 18:33 +0200
        Re: can't access a service to a remate hosts xeon Mailinglist <xeonmailinglist@gmail.com> - 2014-02-23 09:33 -0800
          Re: can't access a service to a remate hosts xeon Mailinglist <xeonmailinglist@gmail.com> - 2014-02-23 09:34 -0800
            Re: can't access a service to a remate hosts Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2014-02-23 20:03 +0200
              Re: can't access a service to a remate hosts Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2014-02-23 19:50 +0100
                Re: can't access a service to a remate hosts Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2014-02-23 23:32 +0200
                Re: can't access a service to a remate hosts Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2014-02-24 00:14 +0100
            Re: can't access a service to a remate hosts Andrew Gideon <c182driver9@gideon.org> - 2014-02-26 14:16 +0000
        Re: can't access a service to a remate hosts Joe Beanfish <joebeanfish@nospam.duh> - 2014-02-24 15:01 +0000
      Re: can't access a service to a remate hosts Ulf Volmer <u.volmer@u-v.de> - 2014-02-23 19:15 +0100
        Re: can't access a service to a remate hosts Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2014-02-23 19:46 +0100
      Re: can't access a service to a remate hosts William Unruh <unruh@invalid.ca> - 2014-02-23 19:48 +0000
  Re: can't access a service to a remate hosts William Unruh <unruh@invalid.ca> - 2014-02-23 19:47 +0000

csiph-web