Questions tagged [flags]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
24 views

Data from NF Tables to IP Tables

I have input data like below for NF Tables: nft add rule filter input tcp flags != syn nft add rule filter input tcp flags &syn!= syn add rule filter output tcp flags & (syn | ack) == syn | ...
Karma Yogi's user avatar
0 votes
0 answers
44 views

Parsing TCP flag Data for IP Tables

I have input file which has data like below chain:VARIABLE_IN ip_version:v4 proto:tcp sport:5401 dst_ip:18.159.158.206 dport:5432 decision:a tcpflags:&syn!=syn My code reads above data to form ...
Karma Yogi's user avatar
0 votes
0 answers
59 views

How to set TCP flags "&syn!=syn" in iptables?

I have requirement where am getting parameters to set in iptables as below: Rate Limit = 1/sec Source port = 5432 Source IP = 203.0.113.0 Protocol = tcp TCP flags = &syn!=syn iptables -A PRIO_IN -...
Karma Yogi's user avatar
0 votes
1 answer
146 views

How to get syn flags, ack flags, sequence number and acknowledgement number in tcp packets with nfqueue?

I am working on a project which can redirect the network traffic in tcp (packets sent by client to server1 will be redirected to server2) with netfilterqueue, so I need to classify the packets by ...
Alive's user avatar
  • 1
4 votes
2 answers
3k views

What's is the purpose of a trailing '-' in a Kubernetes apply -f -

I was passed the following, which does a dry run of the creation of a kubernetes secret from an appsettings.json file, which is then piped to a kubernetes apply. I think that the -f will take the ...
Chris Halcrow's user avatar
8 votes
1 answer
1k views

Spamassassin logging scores

I have the Spamassassin 3.4 + Ubuntu 14 + Qmail + Clamav. All are running OK. When a SPAM is detected, it is marked as [spam] and delivered to recipients. Readind the spamd log (mail.log for me), I ...
Daniel's user avatar
  • 81
2 votes
3 answers
2k views

Identifying certain Active Directory accounts as "IsHuman"

I'd like to flag certain Active Directory accounts to indicate that they represent individual, physical people as opposed to groups, service accounts, built-in accounts, etc. This could be via a ...
mwolfe02's user avatar
  • 193
1 vote
1 answer
3k views

How to control access to folders to a Windows VPN client session?

I have setup a Windows service role VPN all right. Next step is limit access of the VPN session user account. Some folders should be denied from client viewing (e.g.: system folders, program files, ...
capum's user avatar
  • 21
9 votes
1 answer
10k views

Can someone explain nginx conditional flags? (-f, -d, -e, etc)

I'm in the process of migrating from Apache to nginx and have used http://winginx.com/en/htaccess to migrate the rewrite rules. I'm trying to understand what the translated ones mean though and I can'...
Nathaniel Schweinberg's user avatar
2 votes
2 answers
582 views

Automatically selecting default in Unix terminal

I'm aware that a command such as something -y will force a yes answer on any response back from the terminal, but I'm having problems with getting Ansible to automate the process of configuration. ...
user avatar
1 vote
1 answer
3k views

What's the meaning of `netstat -i` flags

When I run netstat -i in Linux, I get outputs like: Kernel Interface table Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg eth0 1500 0 0 0 0 0 ...
can.'s user avatar
  • 191
1 vote
1 answer
3k views

How to filter TCP packets based on flags using Packet Filter

Well, I didn't know exactly how to ask this question, but I know that you can use the keyword flags to especify which flags you want to filter. According to the documentation of the Packet filter: ...
Davi Sampaio's user avatar
4 votes
1 answer
1k views

What happens to tcp packets when they are unable to finish the 3 way handshake?

Firewall for a virtual dedicated server. I was looking into how to prevent a FIN scan and it got me thinking about the consequences. A lot of people are using this rule: -p tcp --tcp-flags FIN,SYN,...
Kris's user avatar
  • 1,387
13 votes
2 answers
32k views

tcp flags in iptables: What's the difference between RST SYN and RST and SYN RST ? When to use ALL?

I'm working on a firewall for a virtual dedicated server and one of the things I'm looking into is port scanners. TCP flags are used for protection. I have 2 questions. The rule: -p tcp --tcp-...
Kris's user avatar
  • 1,387
0 votes
1 answer
1k views

iptables doesn't want to log and drop simultaneously

I'm (still) trying to build an iptables firewall, but this time, I'm stuck trying to log dropped packets. Here is how I'm doing this (this code is inserted after the ACCEPT rules; $IPT represents the ...
Penegal's user avatar
  • 156
0 votes
1 answer
45 views

Determine flags used during 'configure' step of an installation after the fact

So in my case, I'm upgrading a Ruby install from a low patch level to a higher one. I wanted know exactly what flags, if any, were used in the previous ./configure step of the installation process. ...
Abel's user avatar
  • 103
1 vote
2 answers
149 views

Strange behaviour with RewriteRule flags?

I have a gallery with pictures. If anybody links my gallery pictures from somewhere else (remote server), a forbitten image should be shown. This basically works, but now I recognized a strange ...
Bevor's user avatar
  • 113
2 votes
4 answers
10k views

Use of TCP FIN and TCP RST

I've been reading about the TCP protocol recently because I was a little curious about how and why certain flags were used. In the information I found it talks about a normal close TCP FIN should be ...
Phillip's user avatar
  • 163
1 vote
2 answers
1k views

Using RIPE's "-B" flag with the whois command

When using RIPE web DB search system, you can add the "-B" flag to list hidden attributes of an object. I'm trying to find a way of adding the "-B" flag somewhere within the following command: > ...
Squeeb's user avatar
  • 172
0 votes
1 answer
96 views

SQL server 2000 trace Flags

On fixing an issue we are having with our backups I am following instructions where it is telling me to add the Trace Flag -g384. This is all good but I am not sure what this perameter actually does. ...
Andy 's user avatar
  • 199
7 votes
3 answers
7k views

DNSSEC - Ad Flag not activated

I have some doubts regarding DNSSEC. I have one server acting as an Authoritative Name Server and another one as a Cache/Resolver. I'm using Bind 9.7.1-P2 and these are my configuration files: Named....
user avatar
6 votes
7 answers
23k views

OpenSSL x509 Purpose flag "Any Purpose" What is this?

Looking at the details of a certificate using the following: openssl x509 -noout -text -purpose -in mycert.pem I find a bunch of purpose flags (which I've discovered are set by the various ...
Nick's user avatar
  • 203
1 vote
1 answer
252 views

Netstat flags on OS/2

On an OS/2 box, what do the flags UGDP mean in the output of netstat -r. Google seems to point to them meaning Up, Gateway (i.e. an indirect root), and Dynamic (learned from a redirect), but that ...
Cian's user avatar
  • 5,858