|
Posted by tom on January 9, 2008, 6:25 am
If you were Registered and logged in, you could reply and use other advanced thread options
Hello,
I have DLF-1600 firewall working in transparent mode, all stateful
connections are working brilliant, however for passive fingerprinting
purposes I need to bypass stateful engine and forward packet straight
to linux box. There is FwdFast rule, but it triggers only on incoming
traffic, not outcoming. I've tried to make it together with SAT rule
but no success. I've got two rules to accomplish it:
SMTP_in FwdFast any all-nets any IP_SMTP smtp
SMTP_out FwdFast any IP_SMTP any all-nets smtp
And only first one is trigerred, although IP_STMP responses correctly,
tcpdump from IP_SMTP
IP 190.44.192.17.45558 > 213.15.35.135.25: F 815:815(0) ack 293 win
65243
IP 213.15.35.135.25 > 190.44.192.17.45558: . ack 816 win 6850
Could you please help me with this issue?
Best Regards,
Tomasz
| 
XML site map