Re: [Snort-inline-users] Checksum calculation and 2.6 kernel

[Joey M. <ix...@cf...>]

Thank you for the heads-up Will.

Are there any security related side-effects from doing this?

I actually think my Samba server was exhibiting this issue. Intermittentl=
y
it would start dropping packets without logging anything. My web server
(also running 2.6) seems to be doing fine, however.

> List,
>
> Not sure why this is happening yet, but it appears as if running a 2.6
> kernel and filtering on local traffic in the INPUT/OUTPUT chains,
> snort_inline/snort doesn't properly calculate the checksum of the
> INBOUND/OUTBOUND packets and they are dropped.  If you are
> experiencing this problem please change the following line in your
> snort_inline.conf file.
>
> config checksum_mode: all
> config checksum_mode: none
>
> Regards,
>
> Will
>
>
> -------------------------------------------------------
> This SF.Net email is sponsored by: InterSystems CACHE
> FREE OODBMS DOWNLOAD - A multidimensional database that combines
> robust object and relational technologies, making it a perfect match
> for Java, C++,COM, XML, ODBC and JDBC. www.intersystems.com/match8
> _______________________________________________
> Snort-inline-users mailing list
> Sno...@li...
> https://lists.sourceforge.net/lists/listinfo/snort-inline-users
>