Linux layer 7 packet classifier

5 edonkey.pat catches NTP request - ID: 2806839

Last Update: Comment added ( quadong )

Details:

If you create iptables rule with edonkey.pat and DROP target all NTP
requests will be dropped. I guess it is because of overmatching by this
pattern.

Submitted:

Nobody/Anonymous ( nobody ) - 2009-06-15 21:50

Priority:

Status:

Closed

Resolution:

Invalid

Assigned:

Matthew Strait

Category:

patterns

Group:

patterns

Visibility:

Private

Date: 2009-06-16 14:37 Sender: quadong Overmatching is a documented attribute of the edonkey pattern. Sorry. As you can see in the pattern file comments, it is a rather difficult protocol to match. If you can make a pattern that still matches edonkey and not NTP, please send it along.

Field	Old Value	Date	By
status_id	Open	2009-06-16 14:37	quadong
resolution_id	None	2009-06-16 14:37	quadong
allow_comments	1	2009-06-16 14:37	quadong
close_date	-	2009-06-16 14:37	quadong