* -m state ESTABLISHED, NEW etc...
@ 2002-05-30 14:27 tirexx
0 siblings, 0 replies; only message in thread
From: tirexx @ 2002-05-30 14:27 UTC (permalink / raw)
To: netfilter
Hi all
TCP connection flow by this scenario
Can someone explain me where pass borders of state ESTABLISHED, NEW.
1-> SYN
2<- SYN ACK
3-> ACK
connected
....
4-> ACK
5<- ACK
....
6-> FIN
7<- ACK
8<- FIN
9-> ACK
closed
I think so:
1,2,3 NEW
2,3,4,5,6,7,8,9 ESTABLISHED
2,3,4,5,6,7,8,9 RELATED
i`m wrong?
with this rules outgoing connect work
incomming connect not work
this demonstrate 2,3,4,5,6,7,8,9 = ESTABLISHED
iptables -A FORWARD -o eth_external -i eth_internal -p tcp -d
x.x.x.x --dport x -j ACCEPT
iptables -A FORWARD -i eth_external -o eth_internal -p tcp -s
x.x.x.x --sport x -m state --state ESTABLISHED -j ACCEPT
^ permalink raw reply [flat|nested] only message in thread
only message in thread, other threads:[~2002-05-30 14:27 UTC | newest]
Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2002-05-30 14:27 -m state ESTABLISHED, NEW etc tirexx
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox