From mboxrd@z Thu Jan 1 00:00:00 1970 From: Pascal Hambourg Subject: Re: how to harden iptables rules? Date: Thu, 04 Mar 2010 17:56:13 +0100 Message-ID: <4B8FE62D.1090202@plouf.fr.eu.org> References: <20100303172001.149912au9jha5s8g@webmail.physik.uni-muenchen.de> <4B8E9F4A.9080706@plouf.fr.eu.org> <4B8FA8EC.3020100@chello.at> Mime-Version: 1.0 Content-Transfer-Encoding: QUOTED-PRINTABLE Return-path: In-Reply-To: <4B8FA8EC.3020100@chello.at> Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="iso-8859-1" To: netfilter@vger.kernel.org Mart Frauenlob a =E9crit : > On 03.03.2010 18:41, Pascal Hambourg wrote: >=20 >> No, valid ICMP error messages have the ESTABLISHED state. >=20 > http://www.frozentux.net/iptables-tutorial/iptables-tutorial.html#ICM= PCONNECTIONS > and the man page say different. My mistake, I meant RELATED of course.