Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [flags]

20 questions
13
votes
2 answers

tcp flags in iptables: What's the difference between RST SYN and RST and SYN RST ? When to use ALL?

I'm working on a firewall for a virtual dedicated server and one of the things I'm looking into is port scanners. TCP flags are used for protection. I have 2 questions. The rule: -p tcp --tcp-flags SYN,ACK,FIN,RST SYN -j DROP First argument…
Kris
  • 1,347
  • 3
  • 15
  • 16
8
votes
1 answer

Can someone explain nginx conditional flags? (-f, -d, -e, etc)

I'm in the process of migrating from Apache to nginx and have used http://winginx.com/en/htaccess to migrate the rewrite rules. I'm trying to understand what the translated ones mean though and I can't find any documentation on it. Here's an…
Nathaniel Schweinberg
  • 255
  • 2
  • 10
7
votes
3 answers

DNSSEC - Ad Flag not activated

I have some doubts regarding DNSSEC. I have one server acting as an Authoritative Name Server and another one as a Cache/Resolver. I'm using Bind 9.7.1-P2 and these are my configuration files: Named.conf (Authoritative Server) // Opciones de…
Arancha
6
votes
7 answers

OpenSSL x509 Purpose flag "Any Purpose" What is this?

Looking at the details of a certificate using the following: openssl x509 -noout -text -purpose -in mycert.pem I find a bunch of purpose flags (which I've discovered are set by the various extensions attached to a certificate). One of these purpose…
Nick
  • 203
  • 1
  • 2
  • 3
5
votes
1 answer

Spamassassin logging scores

I have the Spamassassin 3.4 + Ubuntu 14 + Qmail + Clamav. All are running OK. When a SPAM is detected, it is marked as [spam] and delivered to recipients. Readind the spamd log (mail.log for me), I grep these lines: Jul 14 17:32:36 mail spamd[2575]:…
Daniel
  • 51
  • 1
4
votes
1 answer

What happens to tcp packets when they are unable to finish the 3 way handshake?

Firewall for a virtual dedicated server. I was looking into how to prevent a FIN scan and it got me thinking about the consequences. A lot of people are using this rule: -p tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN -j DROP So when someone…
Kris
  • 1,347
  • 3
  • 15
  • 16
4
votes
2 answers

What's is the purpose of a trailing '-' in a Kubernetes apply -f -

I was passed the following, which does a dry run of the creation of a kubernetes secret from an appsettings.json file, which is then piped to a kubernetes apply. I think that the -f will take the filename of the --dry-run created secret and use that…
Chris Halcrow
  • 223
  • 2
  • 10
2
votes
3 answers

Identifying certain Active Directory accounts as "IsHuman"

I'd like to flag certain Active Directory accounts to indicate that they represent individual, physical people as opposed to groups, service accounts, built-in accounts, etc. This could be via a custom or built-in attribute, group, etc. Ideally,…
mwolfe02
  • 193
  • 1
  • 1
  • 12
2
votes
2 answers

Automatically selecting default in Unix terminal

I'm aware that a command such as something -y will force a yes answer on any response back from the terminal, but I'm having problems with getting Ansible to automate the process of configuration. The module in question has defaults (a [no]) and…
user172409
2
votes
4 answers

Use of TCP FIN and TCP RST

I've been reading about the TCP protocol recently because I was a little curious about how and why certain flags were used. In the information I found it talks about a normal close TCP FIN should be used to close a connection but then it also talks…
Phillip
  • 163
  • 2
  • 7
1
vote
1 answer

Netstat flags on OS/2

On an OS/2 box, what do the flags UGDP mean in the output of netstat -r. Google seems to point to them meaning Up, Gateway (i.e. an indirect root), and Dynamic (learned from a redirect), but that leaves me mystified as to the meaning of P. The only…
Cian
  • 5,777
  • 1
  • 27
  • 40
1
vote
1 answer

How to control access to folders to a Windows VPN client session?

I have setup a Windows service role VPN all right. Next step is limit access of the VPN session user account. Some folders should be denied from client viewing (e.g.: system folders, program files, users profiles), some should be allowed. I don't…
capum
  • 21
  • 1
  • 5
1
vote
1 answer

What's the meaning of `netstat -i` flags

When I run netstat -i in Linux, I get outputs like: Kernel Interface table Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg eth0 1500 0 0 0 0 0 236 0 0 0 BMPRU eth1 …
can.
  • 181
  • 1
  • 9
1
vote
1 answer

How to filter TCP packets based on flags using Packet Filter

Well, I didn't know exactly how to ask this question, but I know that you can use the keyword flags to especify which flags you want to filter. According to the documentation of the Packet filter: To have PF inspect the TCP flags during evaluation…
Davi Sampaio
  • 111
  • 2
1
vote
2 answers

Strange behaviour with RewriteRule flags?

I have a gallery with pictures. If anybody links my gallery pictures from somewhere else (remote server), a forbitten image should be shown. This basically works, but now I recognized a strange behaviour with my rewrite rule. Here is the…
Bevor
  • 113
  • 1
  • 11
1
2