Hot answers tagged

5

Maybe your admin dislikes NGINX Plusbecause it isn't open source and would accept another well maintained open source product. Then ask him to look at stunnel. It is designed for exactly your needs. Quoting an stunnel example at wikipedia (for SMTP, but this would fit alos for your needs): For example, one could use stunnel to provide a secure SSL ...


3

Having read all the analysis in the answers, this problem very much sounds like you might be running Windows7/2008R2 aka Windows 6.1 The networking stack (TCP/IP & Winsock) in Windows 6.1 was horribly flawed and had a whole host of bugs and performance problems which Microsoft eventually addressed over many years of hotfixing since the initial release ...


3

No iptables rule will ever close an existing TCP connection as that involves actively transmitting a message with the FIN bit. That is done by the application and not by a packet filter. On the other hand iptables can, at any moment, block your application from receiving or transmitting new packets over any existing connection and it can also deny any new ...


3

is UDP more like a broadcast protocol and therefor my pc is only listening to that port for incoming information? Not likely. UDP can be used that way, but it doesn't work very well over the Internet. if not, is there a way to identify the ip addresses to which those UDP ports are connected to? UDP ports aren't connected to anything. UDP is ...


2

In short: yes! But that depends a bit in the syslog daemon you're running. Syslog-ng allows that with the program() destination. Rsyslog offers actions.


1

In my case the following command fixed the problem with missing SYN/ACK replies from Linux server: sysctl -w net.ipv4.tcp_tw_recycle=0 I think it is more correct than disabling TCP timestamps, as TCP timestamps are useful after all (PAWS, window scaling, etc). The documentation on the tcp_tw_recycle explicitly states that it is not recommended to enable ...


1

Dropping the [RST,ACK] and [FIN,ACK] will not work. There are many application like ftp upload that will simply fail to ack the completion of the FTP transfer. The comments by gscott are the correct method, but one additional requirement is needed. You must make them strict by applying the policy iptables -P OUTPUT DROP iptables -P FORWARD DROP iptables -...



Only top voted, non community-wiki answers of a minimum length are eligible