[Fwd: Re: [netfilter-core] Bug on conntrack?]

[alex@dhost.ro]

 Hy i'm trying to add a rule in firewall but i receive this error:

 iptables v1.4.2: conntrack: Bad value for "--expires" option: "1:1000"
 Try `iptables -h' or 'iptables --help' for more information.
 iptables v1.4.2: conntrack: Bad value for "--expires" option: "1:1000"
 Try `iptables -h' or 'iptables --help' for more information.

 The lines that i want to add are:
 $IPTABLES -A RST_LOOP_OUT -d $IP_LOOP -p tcp --sport $PORT_LOOP
--tcp-flags ALL PSH,ACK -m conntrack --ctexpire 1:1000 -j REJECT
--reject-with tcp-reset

 $IPTABLES -A RST_LOOP_OUT -d $IP_LOOP -p tcp --sport $PORT_LOOP
--tcp-flags ALL FIN,PSH,ACK -j REJECT -m conntrack --ctexpire 1:1000
--reject-with tcp-reset

 If  i give a single value to --ctexpire it works (ex: --ctexpire 1 ) I've
searched on google a lot of days but without any result. could you help
me? Thank's