Questions tagged [flags]
20 questions
13
votes
2 answers
tcp flags in iptables: What's the difference between RST SYN and RST and SYN RST ? When to use ALL?
I'm working on a firewall for a virtual dedicated server and one of the things I'm looking into is port scanners. TCP flags are used for protection. I have 2 questions.
The rule:
-p tcp --tcp-flags SYN,ACK,FIN,RST SYN -j DROP
First argument…
![](../../users/profiles/114606.webp)
Kris
- 1,347
- 3
- 15
- 16
8
votes
1 answer
Can someone explain nginx conditional flags? (-f, -d, -e, etc)
I'm in the process of migrating from Apache to nginx and have used http://winginx.com/en/htaccess to migrate the rewrite rules. I'm trying to understand what the translated ones mean though and I can't find any documentation on it. Here's an…
![](../../users/profiles/255520.webp)
Nathaniel Schweinberg
- 255
- 2
- 10
7
votes
3 answers
DNSSEC - Ad Flag not activated
I have some doubts regarding DNSSEC. I have one server acting as an Authoritative Name Server and another one as a Cache/Resolver. I'm using Bind 9.7.1-P2 and these are my configuration files:
Named.conf (Authoritative Server)
// Opciones de…
Arancha
6
votes
7 answers
OpenSSL x509 Purpose flag "Any Purpose" What is this?
Looking at the details of a certificate using the following:
openssl x509 -noout -text -purpose -in mycert.pem
I find a bunch of purpose flags (which I've discovered are set by the various extensions attached to a certificate).
One of these purpose…
![](../../users/profiles/34431.webp)
Nick
- 203
- 1
- 2
- 3
5
votes
1 answer
Spamassassin logging scores
I have the Spamassassin 3.4 + Ubuntu 14 + Qmail + Clamav.
All are running OK.
When a SPAM is detected, it is marked as [spam] and delivered to recipients.
Readind the spamd log (mail.log for me), I grep these lines:
Jul 14 17:32:36 mail spamd[2575]:…
![](../../users/profiles/425243.webp)
Daniel
- 51
- 1
4
votes
1 answer
What happens to tcp packets when they are unable to finish the 3 way handshake?
Firewall for a virtual dedicated server.
I was looking into how to prevent a FIN scan and it got me thinking about the consequences.
A lot of people are using this rule:
-p tcp --tcp-flags FIN,SYN,RST,PSH,ACK,URG FIN -j DROP
So when someone…
![](../../users/profiles/114606.webp)
Kris
- 1,347
- 3
- 15
- 16
4
votes
2 answers
What's is the purpose of a trailing '-' in a Kubernetes apply -f -
I was passed the following, which does a dry run of the creation of a kubernetes secret from an appsettings.json file, which is then piped to a kubernetes apply. I think that the -f will take the filename of the --dry-run created secret and use that…
![](../../users/profiles/180646.webp)
Chris Halcrow
- 223
- 2
- 10
2
votes
3 answers
Identifying certain Active Directory accounts as "IsHuman"
I'd like to flag certain Active Directory accounts to indicate that they represent individual, physical people as opposed to groups, service accounts, built-in accounts, etc. This could be via a custom or built-in attribute, group, etc.
Ideally,…
![](../../users/profiles/25995.webp)
mwolfe02
- 193
- 1
- 1
- 12
2
votes
2 answers
Automatically selecting default in Unix terminal
I'm aware that a command such as something -y will force a yes answer on any response back from the terminal, but I'm having problems with getting Ansible to automate the process of configuration. The module in question has defaults (a [no]) and…
user172409
2
votes
4 answers
Use of TCP FIN and TCP RST
I've been reading about the TCP protocol recently because I was a little curious about how and why certain flags were used.
In the information I found it talks about a normal close TCP FIN should be used to close a connection but then it also talks…
![](../../users/profiles/16933.webp)
Phillip
- 163
- 2
- 7
1
vote
1 answer
Netstat flags on OS/2
On an OS/2 box, what do the flags UGDP mean in the output of netstat -r. Google seems to point to them meaning Up, Gateway (i.e. an indirect root), and Dynamic (learned from a redirect), but that leaves me mystified as to the meaning of P. The only…
![](../../users/profiles/2598.webp)
Cian
- 5,777
- 1
- 27
- 40
1
vote
1 answer
How to control access to folders to a Windows VPN client session?
I have setup a Windows service role VPN all right. Next step is limit access of the VPN session user account. Some folders should be denied from client viewing (e.g.: system folders, program files, users profiles), some should be allowed. I don't…
![](../../users/profiles/243996.webp)
capum
- 21
- 1
- 5
1
vote
1 answer
What's the meaning of `netstat -i` flags
When I run netstat -i in Linux, I get outputs like:
Kernel Interface table
Iface MTU Met RX-OK RX-ERR RX-DRP RX-OVR TX-OK TX-ERR TX-DRP TX-OVR Flg
eth0 1500 0 0 0 0 0 236 0 0 0 BMPRU
eth1 …
![](../../users/profiles/121369.webp)
can.
- 181
- 1
- 9
1
vote
1 answer
How to filter TCP packets based on flags using Packet Filter
Well, I didn't know exactly how to ask this question, but I know that you can use the keyword flags to especify which flags you want to filter.
According to the documentation of the Packet filter:
To have PF inspect the TCP flags during evaluation…
![](../../users/profiles/170234.webp)
Davi Sampaio
- 111
- 2
1
vote
2 answers
Strange behaviour with RewriteRule flags?
I have a gallery with pictures. If anybody links my gallery pictures from somewhere else (remote server), a forbitten image should be shown. This basically works, but now I recognized a strange behaviour with my rewrite rule. Here is the…
![](../../users/profiles/49739.webp)
Bevor
- 113
- 1
- 11