I have the following rules in INPUT chain:  -A INPUT -m conntrack --ctstate RELATED,ESTABLISHED -j ACCEPT -A INPUT -m conntrack --ctstate INVALID -j DROP -A INPUT -s 127.0.0.1/32 -j ACCEPT -A INPUT -s 10.0.0.0/8 -j ACCEPT -A INPUT -s 172.16.0.0/12 -j ACCEPT -A INPUT -s 192.168.0.0/16 -j ACCEPT -A INPUT -j DROP   It is dead simple: traffic from private addreses is allowed, the rest is dropped. If I attempt a TCP connection from any public address, it is dropped, as expected. However, UDP traffic is allowed through, on any port. What am I missing here? System is Debian 9, kernel version 4.9.30-2+deb9u5.  EDIT: I was wrong, TCP traffic passes through as well (it was blocked elsewhere). So with these rules, all traffic is accepted. How is this possible?  EDIT 2: I was wrong again, my testing method was flawed. Some connections were getting through at one point, but the only logical explanation is that they were already established, which was resolved after I rebooted the machine. Thanks for the help, everybody.
I have a firewall with these simple rules:  iptables -A INPUT -p tcp -s 127.0.0.1/32 --dport 6000 -j ACCEPT iptables -A INPUT -p tcp -s 192.168.16.20/32 --dport 6000 -j ACCEPT iptables -A INPUT -p tcp --dport 6000 -j REJECT   Now, suppose I am using TCPDUMP like this:  tcpdump port 6000   And I have host 192.168.16.21 trying to connect to port 6000.  Will/should tcpdump output some packets coming from 192.168.16.21?
Text won't appear in interface? There is one problem, it seems that text won't appear on my program. The three images show the errors and also my laptop specs (I believe I just have very small amount of laptop power that makes Blender glitch).  Everything else works fine (zooming, panning, rotating, etc.) and the buttons are still there and do what they're supposed to do, but the text just won't appear.  Might anybody know how to fix this?        The drive update didn't help either. I know a way around it though, does anybody know a page which shows screenshots of more or less the buttons on blender Is there an AES identity key? The following questions are of pure theoretical nature. I don't have an application in mind.   Is there a key that makes AES the identity function? Is there a key that makes AES the identity function for certain inputs? Is it known whether such keys might exist? Are such keys known for other ciphers?   For example, I want to encrypt "Hello StackExchg" with AES with said key and the ciphertext should be again "Hello StackExchg".  When I encrypt "Hello StackExchg" with the perfect cipher one-time-pad, there is a possibility that the resulting ciphertext is again "Hello StackExchg". This possibility must exist (though it is unrealistically small), otherwise, the ciphertext would not be perfectly random but depending on the plaintext. The corresponding key for one-time-pad would be all zeros. When I dip a paper towel in a cup of water the water gets drawn up due to . How is this reconciled with conservation of energy, as it would seem on the surface that the potential energy of the system has gone up with no work being done? Eclipse menus are cut off or don't show I'm using Ubuntu 13.10 (with JDK 1.7.0_45).  I've downloaded and uncompressed Eclipse Kepler for Java EE Developers.  The software menus are messed up. I didn't notice similar problems in other software.  When I click any menu in Eclipse, the drop-down seems to be "cut". Sometimes the drop-down shows, but the options are invisible.  I tried Eclipse Indigo, but the same problem occurs. Asking a question: DO or ARE? When should you ask a question with &quot;do&quot;, and when with &quot;are&quot;?  In other words,  Are you going to Spain next week?   Do you like Chinese food?  What is the rule here?  We don't say  Do you go to Spain next week?   Are you liking Chinese food?  Why is that? Can't install Oracle Java 8 in Ubuntu 16.04 Note: This is a canonical post created so that we can close the many similar questions as duplicates as discussed in .   We have created a logo for a client and they love it. We've already started preparing the materials that will feature the new logo.   However, after we had created the logo, we found a logo for another company that looks eerily similar. We did not intentionally create the new logo to look like the one of the other company, in fact we didn't even know it existed beforehand, but it does regardless.  What should we do? Is this plagiarism? Can our client use the logo we have created? Should they? Or do we need to come up with another logo that's more different? Uxie and Azelf Are Not Appearing in Nameless Cavern Let $X$ be a transitive $G$-set. ($G$ acts on  $X$ transitively.) If $X$ is finite and has at least two elements, show that there is some element $g$ $\in$ G which does not have any fixed points; that is, such that $g$$($$x$$)$ $\ne$ $x$ for all $x$ $\in$ $X$  I am trying to use contradiction, but it is not very clear to me why this is true. I've recently taken up a position in an all Mac workshop - We have Intel based Apple machines. Can I dual boot Ubuntu on my machine, if so how? Is it possible to have connecting loop lines (like algorithm2e) in algorithmic? I am using the algorithmic package to typeset an algorithm. I would like to have connecting lines between the beginning and end of a loop or conditional like in the algorithm2e package. Is there an easy way to accomplish this, or am I better off switching to algorithm2e? I am using 301 redirects for all URLs.  Should I change sitemap URLs now?  The sitemap currently contains the following URLs:   example.com/cat/1.html example.com/cat/2.html example.com/cat/3.html   Should I change the sitemap's URLs to a new destination?   example.com/cat/year/1.html example.com/cat/year/2.html example.com/cat/year/3.html I have a DB Server running CentOS 6.4 and MySQL 5.5 from RPMs (not source).  I have dozens of databases but one of them is being hit quite hard with large selects which locks out other updates which in turn locks out other selects (at least I think this is what's happening!)  To alleviate this I would like to replicate one of the databases onto the same server so that the writes can write to the "master" and reads can be done on the "slave". I don't have the luxury of additional hardware.  I have found a lot of guides on the internet describing how to replicate to a different server, and one () describing how to replicate to the same server but it doesn't seem to be geared towards retrofitting this functionality to an existing database with 10s of GB of data in it already. It also talks about compiling MySQL from source.  Does anyone know how I can retrospectively convert my MySQL 5.5 config to replicate one of my databases on the same server?  My existing DB runs on port 3306 so I feel it should be as easy as firing up another instance of MySQL on port 3307 and making some changes to my.cnf but not sure what changes.  Thanks in anticipation. Fantasy novel with amnesiac witch, impotent soldier and cursed animals The story is set in a vaguely medieval world in which a young woman has been cursed by the evil witch who has enslaved her and caused her to lose her memory. With the aid of her talking animal friends who have also been cursed (toad has a huge stone under his tongue meaning he can't feed and a crow with a gem embedded in its wing and there's a little grey kitten too who never grows up) she sets out on a journey to break the curse for herself and her friends. Along the way she meets an injured unicorn and a horny-but-moral soldier rendered impotent by a curse after refusing the disguised witch's sexual advances.  After adventures there's a 'happy ever after' for all of the heroes and the witch meets a sticky end.    In the UK the book had a deep red cover with an illustration. I read it in either the 1990's or the early 2000's. Cracking book, definitely for adults given some of the situations, language and humour. Set horizontal width on custom listings environment I want to create a custom listings environment and want to set its width as something like 90% of textwidth, centred.  Per an  for algorithms, the first thing I tried was to embed the listing in a minipage environment. However, . I found a way to still make standard environment work, but it requires to use the escape command every time before ending the environment.  The second thing I tried was this latter command, but as far as I can see, it doesn't offer a feature to set the width of the listing or centre it.  \documentclass{article} \usepackage{listings} \usepackage{lipsum}   \lstnewenvironment{queryl} %% APPROACH 1  {\lstset{frame=shadowbox,escapechar=`}}  {}  \newenvironment{query} %% APPROACH 2  {\begin{minipage}{4cm}\centering\begin{queryl}}  {\end{queryl}\end{minipage}}   \begin{document} %% APPROACH 1 Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Ut purus elit, vestibulum ut, placerat ac, adipiscing vitae, felis. \begin{queryl} begin { do nothing } end ; \end{queryl} Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Ut purus elit, vestibulum ut, placerat ac, adipiscing vitae, felis.  %% APPROACH 2 Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Ut purus elit, vestibulum ut, placerat ac, adipiscing vitae, felis.  \begin{query} begin { do nothing } end ;`%&lt;- needs escape-to-LaTeX character to work \end{query}  Lorem ipsum dolor sit amet, consectetuer adipiscing elit. Ut purus elit, vestibulum ut, placerat ac, adipiscing vitae, felis. \end{document}     One can note that for the first environment, the frame extends beyond the width of the text. Also, puzzlingly the minipage environment doesn't seem to want to centre and swallows space (though I guess I could perhaps at least get that to work with tinkering).  In any case, does anyone have any ideas on how to set a width for a custom listings environment and centre it without requiring use of the escape character each time to end the environment? Character Limit in HTML How do you impose a character limit on a text input in HTML? Show reference label when it is undefined When a reference is undefined, LaTeX shows simply [??] which doesn't give much information. I would like it to show the label instead. This is useful when more collaborators work on the same preprint and the references are yet to be done.  I'm using neither biblatex nor natbib. I do use bibtex but it is irrelevant for this question.  MWE:  \documentclass{article}  \begin{document}  This: \cite{undef} should look like: [{\bfseries ?? undef}]  \end{document} QGtkStyle was unable to detect the current GTK+ theme When I start any Qt app, I get this message in the terminal, and the Qt app doesn't use the same theme as my Gtk apps:  QGtkStyle was unable to detect the current GTK+ theme.   How do I make QGtkStyle detect my current GTK+ theme?  It seems that LXDE is using a settings daemon, and there is no gtkrc-2.0 file in my home folder. Why are passports checked at the check-in counter, Immigration and even at the gate? I was wondering, why there are passport checks at the check-in counter, Immigration and even at the gate?    For example, I was at Istanbul flying to either UK or US. There's a security check at the check-in counter asking a bunch of questions about my immigration status - even more than the Immigration officer at the border. Also, at the gate, there's also Security officer checking my immigration status and passport asking the same questions.    I thought that would be the responsibility of an Immigration officer rather than some third party company?   The thing I'm curious the most is they don't even know which countries this passport can go to with or without visa. They have to go back to the counter and check with the system which takes a long time. I was wondering why they hire these kind of companies to slow down the process? Remove pseudo nodes in QGIS