3 ms·
Because UDP is connectionless, you’ll also need to enable inbound UDP traffic for outbound requests. Or am I missing something?
by superjan 5y ago
Because UDP is connectionless, you’ll also need to enable inbound UDP traffic for outbound requests. Or am I missing something?
- JustFinishedBSG 5y agoConntrack is pretty clever in the way it classifies "connections", it has heuristics to determine what is a "related" connection (with many manually written rules for many protocols). For UDP it decides that if some packets go one way with UDP, then packets that arrive the exact opposite way not long after are the same connection.
- fulafel 5y agoMost protocols that implement 1:1 sessions and use UDP encapsulation conform to a port usage convention that more or less works despite middeboxes.
- midasuni 5y agoType dig www.google.com @1.1.1.1 Note how it works despite being udp out though your firewall, being batted to a public ip, and the reply on a connection less protocol coming back in and being let through and correctly sent to the correct internal ip, even though someone else in another ip did exactly the same for www.bing.com at the same time.