Messages in this thread | | | Date | Fri, 12 Nov 2010 13:18:17 -0800 (PST) | Subject | Re: [RFC PATCH] network: return errors if we know tcp_connect failed | From | David Miller <> |
| |
From: David Lamparter <equinox@diac24.net> Date: Fri, 12 Nov 2010 22:16:27 +0100
> As food for thought I'd like to pose the following rule: > iptables -A OUTPUT -m statistic --mode nth --every 5 -j DROP > which should, to my understanding, still allow the connect to complete, > even if the first SYN got (silently!...) dropped.
Yes, I agree and this is pretty much the point I tried to make earlier.
| |