Questions tagged [flags]
The flags tag has no usage guidance.
23
questions
0
votes
0
answers
24
views
Data from NF Tables to IP Tables
I have input data like below for NF Tables:
nft add rule filter input tcp flags != syn
nft add rule filter input tcp flags &syn!= syn
add rule filter output tcp flags & (syn | ack) == syn | ...
0
votes
0
answers
44
views
Parsing TCP flag Data for IP Tables
I have input file which has data like below
chain:VARIABLE_IN ip_version:v4 proto:tcp sport:5401 dst_ip:18.159.158.206 dport:5432 decision:a tcpflags:&syn!=syn
My code reads above data to form ...
0
votes
0
answers
59
views
How to set TCP flags "&syn!=syn" in iptables?
I have requirement where am getting parameters to set in iptables as below:
Rate Limit = 1/sec
Source port = 5432
Source IP = 203.0.113.0
Protocol = tcp
TCP flags = &syn!=syn
iptables -A PRIO_IN -...
0
votes
1
answer
146
views
How to get syn flags, ack flags, sequence number and acknowledgement number in tcp packets with nfqueue?
I am working on a project which can redirect the network traffic in tcp (packets sent by client to server1 will be redirected to server2) with netfilterqueue, so I need to classify the packets by ...
4
votes
2
answers
3k
views
What's is the purpose of a trailing '-' in a Kubernetes apply -f -
I was passed the following, which does a dry run of the creation of a kubernetes secret from an appsettings.json file, which is then piped to a kubernetes apply. I think that the -f will take the ...
8
votes
1
answer
1k
views
Spamassassin logging scores
I have the Spamassassin 3.4 + Ubuntu 14 + Qmail + Clamav.
All are running OK.
When a SPAM is detected, it is marked as [spam] and delivered to recipients.
Readind the spamd log (mail.log for me), I ...
2
votes
3
answers
2k
views
Identifying certain Active Directory accounts as "IsHuman"
I'd like to flag certain Active Directory accounts to indicate that they represent individual, physical people as opposed to groups, service accounts, built-in accounts, etc. This could be via a ...
1
vote
1
answer
3k
views
How to control access to folders to a Windows VPN client session?
I have setup a Windows service role VPN all right. Next step is limit access of the VPN session user account. Some folders should be denied from client viewing (e.g.: system folders, program files, ...
9
votes
1
answer
10k
views
Can someone explain nginx conditional flags? (-f, -d, -e, etc)
I'm in the process of migrating from Apache to nginx and have used http://winginx.com/en/htaccess to migrate the rewrite rules. I'm trying to understand what the translated ones mean though and I can'...
2
votes
2
answers
582
views
Automatically selecting default in Unix terminal
I'm aware that a command such as something -y will force a yes answer on any response back from the terminal, but I'm having problems with getting Ansible to automate the process of configuration. ...
1
vote
1
answer
3k
views
What's the meaning of `netstat -i` flags
When I run netstat -i in Linux, I get outputs like:
Kernel Interface table
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
eth0 1500 0 0 0 0 0 ...
1
vote
1
answer
3k
views
How to filter TCP packets based on flags using Packet Filter
Well, I didn't know exactly how to ask this question, but I know that you can use the keyword flags to especify which flags you want to filter.
According to the documentation of the Packet filter:
...
4
votes
1
answer
1k
views
What happens to tcp packets when they are unable to finish the 3 way handshake?
Firewall for a virtual dedicated server.
I was looking into how to prevent a FIN scan and it got me thinking about the consequences.
A lot of people are using this rule:
-p tcp --tcp-flags FIN,SYN,...
13
votes
2
answers
32k
views
tcp flags in iptables: What's the difference between RST SYN and RST and SYN RST ? When to use ALL?
I'm working on a firewall for a virtual dedicated server and one of the things I'm looking into is port scanners. TCP flags are used for protection. I have 2 questions.
The rule:
-p tcp --tcp-...
0
votes
1
answer
1k
views
iptables doesn't want to log and drop simultaneously
I'm (still) trying to build an iptables firewall, but this time, I'm stuck trying to log dropped packets. Here is how I'm doing this (this code is inserted after the ACCEPT rules; $IPT represents the ...
0
votes
1
answer
45
views
Determine flags used during 'configure' step of an installation after the fact
So in my case, I'm upgrading a Ruby install from a low patch level to a higher one. I wanted know exactly what flags, if any, were used in the previous ./configure step of the installation process.
...
1
vote
2
answers
149
views
Strange behaviour with RewriteRule flags?
I have a gallery with pictures. If anybody links my gallery pictures from somewhere else (remote server), a forbitten image should be shown. This basically works, but now I recognized a strange ...
2
votes
4
answers
10k
views
Use of TCP FIN and TCP RST
I've been reading about the TCP protocol recently because I was a little curious about how and why certain flags were used.
In the information I found it talks about a normal close TCP FIN should be ...
1
vote
2
answers
1k
views
Using RIPE's "-B" flag with the whois command
When using RIPE web DB search system, you can add the "-B" flag to list hidden attributes of an object.
I'm trying to find a way of adding the "-B" flag somewhere within the following command:
> ...
0
votes
1
answer
96
views
SQL server 2000 trace Flags
On fixing an issue we are having with our backups I am following instructions where it is telling me to add the Trace Flag -g384. This is all good but I am not sure what this perameter actually does. ...
7
votes
3
answers
7k
views
DNSSEC - Ad Flag not activated
I have some doubts regarding DNSSEC. I have one server acting as an Authoritative Name Server and another one as a Cache/Resolver. I'm using Bind 9.7.1-P2 and these are my configuration files:
Named....
6
votes
7
answers
23k
views
OpenSSL x509 Purpose flag "Any Purpose" What is this?
Looking at the details of a certificate using the following:
openssl x509 -noout -text -purpose -in mycert.pem
I find a bunch of purpose flags (which I've discovered are set by the various ...
1
vote
1
answer
252
views
Netstat flags on OS/2
On an OS/2 box, what do the flags UGDP mean in the output of netstat -r. Google seems to point to them meaning Up, Gateway (i.e. an indirect root), and Dynamic (learned from a redirect), but that ...