[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-relays] connlimit: better to use "DROP" or "REJECT --reject-with tcp-reset"?

To: tor-relays@xxxxxxxxxxxxxxxxxxxx
Subject: Re: [tor-relays] connlimit: better to use "DROP" or "REJECT --reject-with tcp-reset"?
From: teor <teor2345@xxxxxxxxx>
Date: Fri, 12 Jan 2018 10:20:51 +1100
Delivered-to: archiver@xxxxxxxx
Delivery-date: Thu, 11 Jan 2018 18:21:11 -0500
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:content-transfer-encoding:mime-version:date:subject:message-id :references:in-reply-to:to; bh=P5h0llWrAzQCo9J9s/T4R08slF21h1kdnvCFr7wrlnY=; b=Wiw/ranI5Icq3ZXV03xy/0rD7hakqSA2C2PQsWJvX8blkggFfNeW7GMFl3inlBdrOb 2htFVDkf8m+p+cxqqnJwrsOVbgWP7pUqcFoJF5W5ZFyDl7pN/vSqGOgSgoNVtMlA8Cd+ ZDUNRplo5AlSmqtZRQQ2zTbIvwinIAcBetEokYFw2uYD3YfNP8fOrnNi4Bdm905BPxn9 9473lLS3EshRMRfWIDmqZtqC86+MeGysNDGBD9+3NPLaYxF6ZSYNI2SSZFtPHkp6X7Mh scX05NKQs7Aa0Po6XdRnhj8CTcmjvjbnuNJdCWCtLPL/PWrpK2J30FGHgsRjCJ7E5wMP PSwQ==
In-reply-to: <26e0e48c-f319-050a-3b9c-e4eab2f7ffff@gmx.de>
List-archive: <http://lists.torproject.org/pipermail/tor-relays/>
List-help: <mailto:tor-relays-request@lists.torproject.org?subject=help>
List-id: "support and questions about running Tor relays \(exit, non-exit, bridge\)" <tor-relays.lists.torproject.org>
List-post: <mailto:tor-relays@lists.torproject.org>
List-subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=subscribe>
List-unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-relays>, <mailto:tor-relays-request@lists.torproject.org?subject=unsubscribe>
References: <7wID4EZnjygiYeZweXBnKOrz7rTXCbaBPJ2czBBlAGpo31INE74N7tED1LsBDC9SsPo3XHOqDR4sX-YYNv70_AjLAoCzKWrZcteEotKZI5Q=@anondroid.com> <CAKCAbMjfR_zB+htJrWCx3jH7g82zsEOH5GAG9OHMK=ekU4FO0A@mail.gmail.com> <D470FEE0-7528-449F-B520-9E9438F1992B@gmail.com> <712A9445-26A7-4261-A509-CB2629718278@gmail.com> <0e402d1b-3d88-55a6-efdb-2c54aa91e3dd@gmx.de> <A7BA634E-2A7C-4BF3-A224-44AE2E6921B2@gmail.com> <26e0e48c-f319-050a-3b9c-e4eab2f7ffff@gmx.de>
Reply-to: tor-relays@xxxxxxxxxxxxxxxxxxxx
Sender: "tor-relays" <tor-relays-bounces@xxxxxxxxxxxxxxxxxxxx>

> On 12 Jan 2018, at 08:46, Toralf Förster <toralf.foerster@xxxxxx> wrote:
> 
>> On 01/11/2018 02:10 AM, teor wrote:
>> As far as I can tell, this single rule has the same effect:
> Even if " -P INPUT   DROP" is et ?

I think that applying the single rule to the default config,
has the same effect as applying all the rules you specified,
including " -P INPUT DROP".

But I'm not sure, I don't have much iptables experience.

T

_______________________________________________
tor-relays mailing list
tor-relays@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-relays

References:
- [tor-relays] connlimit: better to use "DROP" or "REJECT --reject-with tcp-reset"?
  - From: tor
- Re: [tor-relays] connlimit: better to use "DROP" or "REJECT --reject-with tcp-reset"?
  - From: Zack Weinberg
- Re: [tor-relays] connlimit: better to use "DROP" or "REJECT --reject-with tcp-reset"?
  - From: teor
- Re: [tor-relays] connlimit: better to use "DROP" or "REJECT --reject-with tcp-reset"?
  - From: teor
- Re: [tor-relays] connlimit: better to use "DROP" or "REJECT --reject-with tcp-reset"?
  - From: Toralf Förster
- Re: [tor-relays] connlimit: better to use "DROP" or "REJECT --reject-with tcp-reset"?
  - From: teor
- Re: [tor-relays] connlimit: better to use "DROP" or "REJECT --reject-with tcp-reset"?
  - From: Toralf Förster

Prev by Author: Re: [tor-relays] Upgraded relay non show in ATLAS
Next by Author: Re: [tor-relays] hidden service performance
Previous by thread: Re: [tor-relays] connlimit: better to use "DROP" or "REJECT --reject-with tcp-reset"?
Next by thread: Re: [tor-relays] connlimit: better to use "DROP" or "REJECT --reject-with tcp-reset"?
Index(es):
- Author
- Thread