[Shorewall-users] How to drop established connection

Jerome Tytgat
Sat, 14 Dec 2002 17:11:22 -0000

Or simple use the tcpkill utils which comes with dsniff
(google is your friend).

Just use it as you use tcpdump :)

> -----Message d''origine-----
> De : shorewall-users-admin@shorewall.net
> [mailto:shorewall-users-admin@shorewall.net]De la part de Tom Eastep
> Envoye : vendredi 13 decembre 2002 16:45
> A : lupick
> Cc : shorewall-users@shorewall.net
> Objet : Re: [Shorewall-users] How to drop established connection
>
>
>
>
> --On Friday, December 13, 2002 02:46:31 PM +0100 Remco Barendse
> <shorewall@barendse.to> wrote:
>
> > From what I saw earlier on this list I think it''s not
possible.
> >
> > As a dirty hack you could :
> > bring down your public interface, stop shorewall, bring up your
> interface
> > again and restart shorewall
> >
> > The downside is that your server will be unavailable for a couple of
> > seconds.....
> >
>
> Another approach is to stop Shorewall and unload all of the netfilter
> modules then start Shorewall. NetFilter provides no other way to do this.
>
> -Tom
> --
> Tom Eastep   \ Shorewall - iptables made easy
> Shoreline,    \ http://shorewall.sf.net
> Washington USA \ teastep@shorewall.net
>
> _______________________________________________
> Shorewall-users mailing list
> Shorewall-users@shorewall.net
> http://www.shorewall.net/mailman/listinfo/shorewall-users