Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.networking > #2754
| From | Tauno Voipio <tauno.voipio@notused.fi.invalid> |
|---|---|
| Newsgroups | comp.os.linux.networking |
| Subject | Re: can't access a service to a remate hosts |
| Date | 2014-02-23 23:32 +0200 |
| Organization | A noiseless patient Spider |
| Message-ID | <ledpdc$u07$1@dont-email.me> (permalink) |
| References | (3 earlier) <led7sh$dvn$1@dont-email.me> <33692a1c-ed57-4a5c-a53e-1463a7783e05@googlegroups.com> <2703be8e-d876-4900-87ea-5675f2698f4d@googlegroups.com> <ledd62$gik$1@dont-email.me> <ledfsf$q0k$2@saria.nerim.net> |
On 23.2.14 20:50, Pascal Hambourg wrote: > Tauno Voipio a écrit : >> >> Are you sure that the accessed host is what you think it is? > > Wise question. > >> The 10.x.y.z are RFC1918 private addresses, which can mean >> different hosts in different local networks. If the routers >> obey the RFC's, they must not forward the 10 -series addresses >> if there is any hop in the public network. > > Agreed, but then they should not reply with a TCP RST, should they ? That's right, but it is prefectly correct to have a host with the targeted IP in the network he's attempting access from, so the SYN segment goes to a completely different host the OP is targeting. There is a clue in this direction in the trace he posted: the RST comes from the address he wants to connect to, but without the router hops he claims there are. The RST comes from an unprepared host or from a firewall which is configured to assassin TCP to unallowed ports. -- -TV
Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread
can't access a service to a remate hosts xeon Mailinglist <xeonmailinglist@gmail.com> - 2014-02-23 06:30 -0800
Re: can't access a service to a remate hosts Ulf Volmer <u.volmer@u-v.de> - 2014-02-23 15:39 +0100
Re: can't access a service to a remate hosts xeon Mailinglist <xeonmailinglist@gmail.com> - 2014-02-23 06:55 -0800
Re: can't access a service to a remate hosts Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2014-02-23 18:33 +0200
Re: can't access a service to a remate hosts xeon Mailinglist <xeonmailinglist@gmail.com> - 2014-02-23 09:33 -0800
Re: can't access a service to a remate hosts xeon Mailinglist <xeonmailinglist@gmail.com> - 2014-02-23 09:34 -0800
Re: can't access a service to a remate hosts Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2014-02-23 20:03 +0200
Re: can't access a service to a remate hosts Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2014-02-23 19:50 +0100
Re: can't access a service to a remate hosts Tauno Voipio <tauno.voipio@notused.fi.invalid> - 2014-02-23 23:32 +0200
Re: can't access a service to a remate hosts Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2014-02-24 00:14 +0100
Re: can't access a service to a remate hosts Andrew Gideon <c182driver9@gideon.org> - 2014-02-26 14:16 +0000
Re: can't access a service to a remate hosts Joe Beanfish <joebeanfish@nospam.duh> - 2014-02-24 15:01 +0000
Re: can't access a service to a remate hosts Ulf Volmer <u.volmer@u-v.de> - 2014-02-23 19:15 +0100
Re: can't access a service to a remate hosts Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2014-02-23 19:46 +0100
Re: can't access a service to a remate hosts William Unruh <unruh@invalid.ca> - 2014-02-23 19:48 +0000
Re: can't access a service to a remate hosts William Unruh <unruh@invalid.ca> - 2014-02-23 19:47 +0000
csiph-web