Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #2755

Re: can't access a service to a remate hosts

Path csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.fsmpi.rwth-aachen.de!proxad.net!feeder1-2.proxad.net!usenet-fr.net!nerim.net!saria.nerim.net!not-for-mail
From Pascal Hambourg <boite-a-spam@plouf.fr.eu.org>
Newsgroups comp.os.linux.networking
Subject Re: can't access a service to a remate hosts
Date Mon, 24 Feb 2014 00:14:58 +0100
Organization Plouf !
Lines 26
Message-ID <ledvct$vbb$1@saria.nerim.net> (permalink)
References <36fdfb9e-4473-4fb1-9cd4-1c233ebee3f4@googlegroups.com> <slrnlgk205.ui9.u.volmer@x2-5.u-v.de> <bc2c8dfd-1206-414a-b6d8-9720382d0461@googlegroups.com> <led7sh$dvn$1@dont-email.me> <33692a1c-ed57-4a5c-a53e-1463a7783e05@googlegroups.com> <2703be8e-d876-4900-87ea-5675f2698f4d@googlegroups.com> <ledd62$gik$1@dont-email.me> <ledfsf$q0k$2@saria.nerim.net> <ledpdc$u07$1@dont-email.me>
Reply-To pascal.news@plouf.fr.eu.org
NNTP-Posting-Host zenith.ipv6.plouf.fr.eu.org
Mime-Version 1.0
Content-Type text/plain; charset=ISO-8859-15
Content-Transfer-Encoding 8bit
X-Trace saria.nerim.net 1393197277 32107 2001:7a8:6d23:1::1 (23 Feb 2014 23:14:37 GMT)
X-Complaints-To abuse@nerim.net
NNTP-Posting-Date Sun, 23 Feb 2014 23:14:37 +0000 (UTC)
User-Agent Thunderbird 2.0.0.21 (Windows/20090302)
In-Reply-To <ledpdc$u07$1@dont-email.me>
Xref csiph.com comp.os.linux.networking:2755

Show key headers only | View raw


Tauno Voipio a écrit :
> On 23.2.14 20:50, Pascal Hambourg wrote:
>>
>>> The 10.x.y.z are RFC1918 private addresses, which can mean
>>> different hosts in different local networks. If the routers
>>> obey the RFC's, they must not forward the 10 -series addresses
>>> if there is any hop in the public network.
>> Agreed, but then they should not reply with a TCP RST, should they ?
> 
> That's right, but it is prefectly correct to have a host
> with the targeted IP in the network he's attempting access
> from, so the SYN segment goes to a completely different
> host the OP is targeting.
> 
> There is a clue in this direction in the trace he posted:
> the RST comes from the address he wants to connect to, but
> without the router hops he claims there are.

Unlike ICMP errors, a TCP RST always appears to come from the target
address, even when sent by an intermediate firewall. Otherwise the
original sender would not accept it.

> The RST comes from an unprepared host or from a firewall
> which is configured to assassin TCP to unallowed ports.

Not from the expected destination host, anyway.

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

can't access a service to a remate hosts xeon Mailinglist <xeonmailinglist@gmail.com> - 2014-02-23 06:30 -0800
  Re: can't access a service to a remate hosts Ulf Volmer <u.volmer@u-v.de> - 2014-02-23 15:39 +0100
    Re: can't access a service to a remate hosts xeon Mailinglist <xeonmailinglist@gmail.com> - 2014-02-23 06:55 -0800
      Re: can't access a service to a remate hosts Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2014-02-23 18:33 +0200
        Re: can't access a service to a remate hosts xeon Mailinglist <xeonmailinglist@gmail.com> - 2014-02-23 09:33 -0800
          Re: can't access a service to a remate hosts xeon Mailinglist <xeonmailinglist@gmail.com> - 2014-02-23 09:34 -0800
            Re: can't access a service to a remate hosts Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2014-02-23 20:03 +0200
              Re: can't access a service to a remate hosts Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2014-02-23 19:50 +0100
                Re: can't access a service to a remate hosts Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2014-02-23 23:32 +0200
                Re: can't access a service to a remate hosts Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2014-02-24 00:14 +0100
            Re: can't access a service to a remate hosts Andrew Gideon <c182driver9@gideon.org> - 2014-02-26 14:16 +0000
        Re: can't access a service to a remate hosts Joe Beanfish <joebeanfish@nospam.duh> - 2014-02-24 15:01 +0000
      Re: can't access a service to a remate hosts Ulf Volmer <u.volmer@u-v.de> - 2014-02-23 19:15 +0100
        Re: can't access a service to a remate hosts Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2014-02-23 19:46 +0100
      Re: can't access a service to a remate hosts William Unruh <unruh@invalid.ca> - 2014-02-23 19:48 +0000
  Re: can't access a service to a remate hosts William Unruh <unruh@invalid.ca> - 2014-02-23 19:47 +0000

csiph-web