diff --git a/Using-DHT.asciidoc b/Using-DHT.asciidoc index e845afe..a8bb1be 100644 --- a/Using-DHT.asciidoc +++ b/Using-DHT.asciidoc @@ -85,4 +85,10 @@ iptables -t raw -I PREROUTING -p udp --dport 6881 -j NOTRACK iptables -t raw -I OUTPUT -p udp --sport 6881 -j NOTRACK .... -Note that this causes all DHT packets to have a state of `UNTRACKED`, keep that in mind if you have any state-based rules in the regular netfilter tables. Similarly, ICMP packets received in reply to untracked outgoing DHT packets (for instance `Host Unreachable` or `Time Exceeded`) will have a state of `INVALID` because they do not belong to any known connection. \ No newline at end of file +Note that this causes all DHT packets to have a state of `UNTRACKED`, keep that in mind if you have any state-based rules in the regular netfilter tables. Similarly, ICMP packets received in reply to untracked outgoing DHT packets (for instance `Host Unreachable` or `Time Exceeded`) will have a state of `INVALID` because they do not belong to any known connection. + +== Tips & Tricks + +== Troubleshooting +=== UFW/iptables blocking inconcent packets when DHT enabled +See http://www.linuxquestions.org/questions/linux-networking-3/why-is-ufw-iptables-blocking-packets-it-shouldn%27t-be-4175500239/ \ No newline at end of file