From: Joel Newkirk <netfilter@newkirk.us>
To: SB CH <chulmin2@hotmail.com>, netfilter@lists.netfilter.org
Subject: Re: "connection tracking" and "Connection state"?
Date: Tue, 1 Apr 2003 22:37:48 -0500 [thread overview]
Message-ID: <200304012237.48814.netfilter@newkirk.us> (raw)
In-Reply-To: <F9fFM7FJ5l7rOwSbiqW0000601a@hotmail.com>
On Tuesday 01 April 2003 08:18 pm, SB CH wrote:
> Hello, all.
>
> connection tracking(stateful inspection) has a relation with this
> menu(make config)?
>
> "Connection tracking match support"
>
> But when I deselect this menu, I can use connection tracking like
> NEW,ESTABLISHED,RELATED etc.
> I think that only "Connection state match support" menu is required to
> use this function.
>
> then what is the function and meaning of the "Connection tracking
> match support"?
As I just found out (Thanks Martin Josefsson!) there is available a
conntrack match. It lets you match more than the three conntrack states
you mentioned - you can match conntrack status like ASSURED, SEEN_REPLY,
etc, as well as 'states' SNAT and DNAT (matches packets which have been
SNATted or DNATted) and also match the original pre-SNAT/pre-DNAT IPs.
http://netfilter.org/documentation/HOWTO//netfilter-extensions-HOWTO-3.html#ss3.3
j
next prev parent reply other threads:[~2003-04-02 3:37 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-04-02 1:18 "connection tracking" and "Connection state"? SB CH
2003-04-02 3:37 ` Joel Newkirk [this message]
2003-04-02 15:33 ` Intercom@x
2003-04-02 21:04 ` Joel Newkirk
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=200304012237.48814.netfilter@newkirk.us \
--to=netfilter@newkirk.us \
--cc=chulmin2@hotmail.com \
--cc=netfilter@lists.netfilter.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.