*** /usr/local/src/iptables-1.4.5/iptables.8 2009-10-19 19:50:25.000000000 +0200 --- /tmp/iptables.8 2009-11-27 20:45:08.000000000 +0100 *************** *** 607,614 **** .PP States for \fB\-\-ctstate\fP: .TP \fBINVALID\fR ! meaning that the packet is associated with no known connection .TP \fBNEW\fR meaning that the packet has started a new connection, or otherwise associated --- 607,618 ---- .PP States for \fB\-\-ctstate\fP: .TP + \fBUNTRACKED\fR + meaning that the packet will not to be tracked by connection tracking. + This state can be set using the \fBNOTRACK\fP target. + .TP \fBINVALID\fR ! meaning that the packet is associated with no known connection. .TP \fBNEW\fR meaning that the packet has started a new connection, or otherwise associated *************** *** 1189,1194 **** --- 1193,1201 ---- [\fB!\fP] \fB\-\-state\fP \fIstate\fP Where state is a comma separated list of the connection states to match. Possible states are + .B UNTRACKED + meaning that the packet will not to be tracked by connection tracking. + This state can be set using the \fBNOTRACK\fP target. .B INVALID meaning that the packet could not be identified for some reason which includes running out of memory and ICMP errors which don't correspond to any