From mboxrd@z Thu Jan 1 00:00:00 1970 From: Guido Lorenzutti Subject: is there a way to discriminate the ESTABLISHED traffic? Date: Sun, 03 Apr 2005 23:51:24 -0300 Message-ID: <4250ABAC.5010207@lorenzutti.com.ar> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: netfilter-bounces@lists.netfilter.org Errors-To: netfilter-bounces@lists.netfilter.org Content-Type: text/plain; charset="us-ascii"; format="flowed" To: netfilter@lists.netfilter.org How can i discriminate the traffic that my firewall is answering from a NEW request from a network from the ESTABLISHED traffic that my firewall is making from a NEW request from him? In rules, to allow traffic TO my box from the lan 10.0.0.0/32 1 ipt -A INPUT -s 10.0.0.0/32 -m state --state NEW -j ACCEPT 2 ipt -A INPUT -s 10.0.0.0/32 -m state --state ESTABLISHED -j ACCEPT 3 ipt -A OUTPUT -d 10.0.0.0/32 -m state --state ESTABLISHED -j ACCEPT Now, to allow traffic FROM my box to the lan 10.0.0.0/32 4 ipt -A OUTPUT -d 10.0.0.0/32 -m state --state NEW -j ACCEPT 5 ipt -A OUTPUT -d 10.0.0.0/32 -m state --state ESTABLISHED -j ACCEPT 6 ipt -A INPUT -s 10.0.0.0/32 -m state --state ESTABLISHED -j ACCEPT The 3 and 5 rules are exactly the same. Is there a way to discriminate this or the things are just like this and there is nothing to do about it? Tnxs in advance.