From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leonardo Rodrigues Subject: simple question about state vs conntrack modules Date: Wed, 21 Oct 2009 19:59:38 -0200 Message-ID: <4ADF844A.3090106@solutti.com.br> Mime-Version: 1.0 Content-Transfer-Encoding: QUOTED-PRINTABLE Return-path: Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="iso-8859-1"; format="flowed" To: ML netfilter recently i have read a nice documentation with some hints for makin= g=20 good rulesets .... and one caught my attention http://jengelh.medozas.de/documents/Perfect_Ruleset.pdf Towards the perfect ruleset Jan Engelhardt August 2009 5 Modern extensions De-facto obsolete extensions: * -m state: replaced by -m conntrack i must confess i dont recall reading about state module being=20 obsoleted by conntrack one ..... is that true ??? I know conntrack has=20 more options .... but that it obsoleted state, that i dont remember ...= =2E --=20 Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, N=C3O mandem email gertrudes@solutti.com.br My SPAMTRAP, do not email it