From: Ray Leach <raymondl@knowledgefactory.co.za>
To: Ramin Dousti <ramin@cannon.eng.us.uu.net>
Cc: Netfilter Mailing List <netfilter@lists.netfilter.org>
Subject: Re: STATELESS
Date: 16 Sep 2003 15:54:08 +0200 [thread overview]
Message-ID: <1063720447.31093.166.camel@raylinux.internal> (raw)
In-Reply-To: <20030916131153.GA16559@cannon.eng.us.uu.net>
[-- Attachment #1: Type: text/plain, Size: 905 bytes --]
On Tue, 2003-09-16 at 15:11, Ramin Dousti wrote:
> On Tue, Sep 16, 2003 at 02:46:27PM +0200, Ray Leach wrote:
>
> > >
> > > Don't load the ip_conntrack module, and / or don't use any iptables rules that
> > > use "-m state" in the arguments :)
> > Yeah, connection tracking automagically implies state inspection.
>
> OK. Thanks for the informative comments but can you lay out the steps to
> prevent stateful inspection? For example, how to unload "ip_conntrack" and
> to prevent it from being reloaded again?
>
Personally, I would re-compile the kernel without connection tracking
support.
> Thanks again.
>
> Ramin
--
--
Raymond Leach <raymondl@knowledgefactory.co.za>
Network Support Specialist
http://www.knowledgefactory.co.za
"lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import"
Key fingerprint = 7209 A695 9EE0 E971 A9AD 00EE 8757 EE47 F06F FB28
--
[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 198 bytes --]
next prev parent reply other threads:[~2003-09-16 13:54 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-09-16 11:36 STATELESS Matthew Mileham
2003-09-16 11:49 ` STATELESS Ray Leach
2003-09-16 12:24 ` STATELESS Cedric Blancher
2003-09-16 11:56 ` STATELESS Gavin Hamill
2003-09-16 12:46 ` STATELESS Ray Leach
2003-09-16 13:11 ` STATELESS Ramin Dousti
2003-09-16 13:54 ` Ray Leach [this message]
2003-09-16 14:15 ` STATELESS Ramin Dousti
2003-09-16 15:03 ` STATELESS Gaël Le Mignot
2003-09-16 15:50 ` STATELESS Ramin Dousti
2003-09-16 16:57 ` STATELESS Cedric Blancher
2003-09-16 18:22 ` STATELESS Ranjeet Shetye
2003-09-16 18:37 ` STATELESS Cedric Blancher
2003-09-17 10:00 ` STATELESS Oskar Andreasson
2003-09-17 11:34 ` STATELESS Julian Gomez
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1063720447.31093.166.camel@raylinux.internal \
--to=raymondl@knowledgefactory.co.za \
--cc=netfilter@lists.netfilter.org \
--cc=ramin@cannon.eng.us.uu.net \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.