From: FiloSottile <filosottile.wiki@gmail.com>
To: netfilter@vger.kernel.org
Subject: Iptables without ipt_state using xt_state
Date: Tue, 12 Jan 2010 18:34:21 +0100 [thread overview]
Message-ID: <4B4CB29D.9000506@gmail.com> (raw)
I am running on a OpenVZ box with static unmodifiable kernel.
I have no ipt_state and ipt_connmark but i have xt_state and xt_connmark.
I want to build a simple firewall, but when i run that:
# iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
iptables: No chain/target/match by that name
How to use xt_state instead ipt_state? Or there is an alternative way to
build firewall?
Thank you
--
Filippo Valsorda FiloSottile@WikiMedia
PADI Rescue Diver #0907EL9205 DAN ADV O2 Provider + BLS #281664
www.filosottile.info GPG 01A82A13@pgp.mit.edu
Key fingerprint 94B6 85B2 AE48 1C47 BD4D DC5B 16F3 ADA6 01A8 2A13
next reply other threads:[~2010-01-12 17:34 UTC|newest]
Thread overview: 8+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-01-12 17:34 FiloSottile [this message]
2010-01-12 18:36 ` Iptables without ipt_state using xt_state Mart Frauenlob
2010-01-12 20:42 ` FiloSottile
2010-01-12 22:43 ` Pascal Hambourg
2010-01-13 8:21 ` Patrick McHardy
2010-01-12 23:02 ` /dev/rob0
-- strict thread matches above, loose matches on Subject: below --
2010-01-13 12:50 FiloSottile
2010-01-16 12:34 ` Mart Frauenlob
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4B4CB29D.9000506@gmail.com \
--to=filosottile.wiki@gmail.com \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.