From: Michael Tremer <michael.tremer@ipfire.org>
To: development@lists.ipfire.org
Subject: Re: Forward default "DROP" is not applied to ORANGE traffic?!
Date: Mon, 07 Jan 2019 12:57:16 +0000 [thread overview]
Message-ID: <64A607A8-C9ED-4CA1-99A3-FF1D19182AFD@ipfire.org> (raw)
In-Reply-To: <ec2c2db2-c8d5-b295-d4cf-94f915b87bbe@link38.eu>
[-- Attachment #1: Type: text/plain, Size: 857 bytes --]
Hey,
> On 6 Jan 2019, at 10:41, Peter Müller <peter.mueller(a)link38.eu> wrote:
>
> Hello Michael,
>
> thanks for your reply. Sorry for the confusion.
>
> The current behaviour is unintentional in my point of view: If default
> policy is set to DROP, connections from GREEN and BLUE to RED are
> forbidden by default, but not from ORANGE to RED. As far as I know,
> this is not even documented.
>
This *is* intended. The code says so.
What you are saying is that it is unexpected. Agreed.
> Thereof, I suggest to change behaviour to DROP, too.
>
> @All: Opinions?
*Raises hand in favour*
-Michael
>
> Thanks, and best regards,
> Peter Müller
> --
> Microsoft DNS service terminates abnormally when it recieves a response
> to a DNS query that was never made. Fix Information: Run your DNS
> service on a different platform.
> -- bugtraq
prev parent reply other threads:[~2019-01-07 12:57 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2018-12-15 16:36 Peter Müller
2018-12-16 13:53 ` Michael Tremer
2018-12-16 17:07 ` oliver.fuhrer
2018-12-23 15:31 ` Peter Müller
2019-01-04 21:12 ` Peter Müller
2019-01-05 12:51 ` Michael Tremer
2019-01-06 10:41 ` Peter Müller
2019-01-07 12:57 ` Michael Tremer [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=64A607A8-C9ED-4CA1-99A3-FF1D19182AFD@ipfire.org \
--to=michael.tremer@ipfire.org \
--cc=development@lists.ipfire.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox