Timeline for stackexchange.com is sending me unsolicited packets (and consequently gets blocked by firewall)
Current License: CC BY-SA 3.0
14 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Mar 6, 2015 at 13:20 | comment | added | user13757 | @MartinVegter You're blocking legitimate traffic, and that (what you're doing) is how. You might understand your rules, but you don't understand how those rules might block legitimate traffic. | |
| Mar 4, 2015 at 12:35 | comment | added | Lightness Races in Orbit | "the problem must be on your side, because I don't get these problems anywhere else" Nonsense logic. | |
| Dec 16, 2014 at 1:52 | answer | added | Mark | timeline score: 12 | |
| Dec 13, 2014 at 19:28 | comment | added | Martin Vegter | @Michael Hampton - I am sorry, but I don't follow | |
| Dec 13, 2014 at 19:27 | comment | added | Michael Hampton | Yes, and that's how legitimate traffic gets blocked. | |
| Dec 13, 2014 at 19:26 | comment | added | Martin Vegter |
@Michael Hampton - what do you mean the rules are reversed? The --update rule must be first, to drop the already blacklisted IP addresses. Only clean IP addresses get to the second line and get a chance to pass the RELATED,ESTABLISHED test. I don't understand the "recent module" internals (I have not studied the code), but I understand what the rule does.
|
|
| Dec 13, 2014 at 19:22 | comment | added | Michael Hampton | Because you said so yourself. And, because your first two rules are reversed. | |
| Dec 13, 2014 at 19:17 | comment | added | Martin Vegter | @Michael Hampton - What makes you believe I don't understand my firewall rule? | |
| Dec 13, 2014 at 19:11 | comment | added | Michael Hampton | Logging the traffic would be a good start. And running a firewall that you don't understand is generally considered a Bad Idea. | |
| Dec 6, 2014 at 22:41 | comment | added | Martin Vegter |
@Braiam - I am sorry, but I don't keep a record of rejected packets. I also do not have sufficient technical skills to troubleshoot this. But the firewall rule that I am using, --ctstate RELATED,ESTABLISHED is standard iptables rule. Anybody who is interested can test it himself.
|
|
| Dec 6, 2014 at 16:57 | comment | added | Anthon |
Do the two icons next to StackExchange in the top bar ( Recent Inbox Messages resp. Recent Achievents: ... ever change (red backgrounded number, +10/20 etc green highlight)? If not you seem to be blocking unsolicited updates of your page that are based on other peoples actions (upvoting, commenting).
|
|
| Dec 6, 2014 at 16:50 | answer | added | Shog9 | timeline score: 21 | |
| Dec 6, 2014 at 16:30 | comment | added | Braiam | Could you show the logs? | |
| Dec 6, 2014 at 16:15 | history | asked | Martin Vegter | CC BY-SA 3.0 |