From 0cf66ddfab1133da96ac2fb1ecbf030f4cc9b263 Mon Sep 17 00:00:00 2001 From: izmntuk Date: Fri, 27 Feb 2015 12:29:43 +0800 Subject: [PATCH] Updated Using DHT (asciidoc) --- Using-DHT.asciidoc | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/Using-DHT.asciidoc b/Using-DHT.asciidoc index e845afe..a8bb1be 100644 --- a/Using-DHT.asciidoc +++ b/Using-DHT.asciidoc @@ -85,4 +85,10 @@ iptables -t raw -I PREROUTING -p udp --dport 6881 -j NOTRACK iptables -t raw -I OUTPUT -p udp --sport 6881 -j NOTRACK .... -Note that this causes all DHT packets to have a state of `UNTRACKED`, keep that in mind if you have any state-based rules in the regular netfilter tables. Similarly, ICMP packets received in reply to untracked outgoing DHT packets (for instance `Host Unreachable` or `Time Exceeded`) will have a state of `INVALID` because they do not belong to any known connection. \ No newline at end of file +Note that this causes all DHT packets to have a state of `UNTRACKED`, keep that in mind if you have any state-based rules in the regular netfilter tables. Similarly, ICMP packets received in reply to untracked outgoing DHT packets (for instance `Host Unreachable` or `Time Exceeded`) will have a state of `INVALID` because they do not belong to any known connection. + +== Tips & Tricks + +== Troubleshooting +=== UFW/iptables blocking inconcent packets when DHT enabled +See http://www.linuxquestions.org/questions/linux-networking-3/why-is-ufw-iptables-blocking-packets-it-shouldn%27t-be-4175500239/ \ No newline at end of file