Reputation
Top tag
Next privilege 125 Rep.
Vote down
Badges
1 5
Newest
 Teacher
Impact
~6k people reached

  • 0 posts edited
  • 0 helpful flags
  • 0 votes cast
Aug
20
revised How does server-side `TIME_WAIT` really work?
edited body
Aug
20
comment How does server-side `TIME_WAIT` really work?
Please explain; when you ask if the server-side TW does anything, you wonder if the same connection can be reused during the TW period. The answer is no because the connection, as defined by the tupple, takes a place in the server's tcp table. If the client tries to open the same connection soon, it will receive a RST, effectively denying the tcp connection. By the way, the article from Khushil is very descriptive.
Aug
19
answered How does server-side `TIME_WAIT` really work?
Jun
4
comment “net.c:577: sendmsg() failed: Operation not permitted” in dig Output
@kayess, nope, this rule allows replies to queries sent from us (OUTPUT, dest port 53) from the remote ( INPUT source port 53) back to us, Also kansal please do not use the second rule (INPUT -p tcp ...) as tcp state is properly handled.
Jun
4
comment “net.c:577: sendmsg() failed: Operation not permitted” in dig Output
@kansal, despite that from your ruleset the UDP request to port 53 should be accepted, try to add explicit, stateless rules for the UDP replies. e.g. -A INPUT -p udp -m udp --sport 53 -j ACCEPT -A INPUT -p tcp -m tcp --sport 53 -j ACCEPT
Jun
4
comment “net.c:577: sendmsg() failed: Operation not permitted” in dig Output
@kayess, for the ipv4 firewall rules, I think that the protocol related rules (--dport 53) are sufficient for both ipv4 & ipv6.
Jun
2
comment “net.c:577: sendmsg() failed: Operation not permitted” in dig Output
@kansal, can you explain what do you mean by "dis notification" ?
Jun
2
awarded  Teacher
Jun
2
comment “net.c:577: sendmsg() failed: Operation not permitted” in dig Output
@JennyD of course it is safer to examine the logs, provided that you have configured them. In any case, when someone disables the firewall for any reason, the host is exposed to various threats. Having said that, for some environments, it might be an acceptable QnD troubleshooting choice, for some seconds.
May
29
comment “net.c:577: sendmsg() failed: Operation not permitted” in dig Output
You can try running the same command as root. If that fails, you can try to temporarily disable the iptables firewall, if any and try again.
Jul
28
awarded  Notable Question
Nov
11
awarded  Popular Question
Feb
1
awarded  Scholar
Feb
1
accepted What is lldpad (RHEL)
Jan
9
awarded  Student
Jan
9
awarded  Editor
Jan
9
revised What is lldpad (RHEL)
edited title
Jan
9
asked What is lldpad (RHEL)