How to completely disable conntrack?

How to completely disable conntrack?

[Petr Šťastný]

I'm using Fedora 14, which has conntrack compiled into the kernel. It is
not a module, so I'm not able to unload it to disable connection
tracking. Is it possible to do it in another way without building my own
kernel?

Thanks

Petr Stastny

Re: How to completely disable conntrack?

[Pandu Poluan]

I'm sure there's a sysctl knob, but off the top of my head:

-t raw -A PREROUTING -j NOTRACK

Rgds,


On 2011-03-09, Petr Šťastný <petr.stastny@centrum.cz> wrote:
> I'm using Fedora 14, which has conntrack compiled into the kernel. It is
> not a module, so I'm not able to unload it to disable connection
> tracking. Is it possible to do it in another way without building my own
> kernel?
>
> Thanks
>
> Petr Stastny
>
>
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>


-- 
--
Pandu E Poluan - IT Optimizer
My website: http://pandu.poluan.info/

Re: How to completely disable conntrack?

[Jan Engelhardt]

On Wednesday 2011-03-09 15:24, Pandu Poluan wrote:

>I'm sure there's a sysctl knob, but off the top of my head:
>
>-t raw -A PREROUTING -j NOTRACK

-j CT --notrack

'-j NOTRACK' is on the path to removal.

Re: How to completely disable conntrack?

[Pascal Hambourg]

Hello,

Pandu Poluan a écrit :
> I'm sure there's a sysctl knob, but off the top of my head:
> 
> -t raw -A PREROUTING -j NOTRACK

You'll need the same in the OUTPUT chain too.

> On 2011-03-09, Petr ¦t(astný <petr.stastny@centrum.cz> wrote:
>> I'm using Fedora 14, which has conntrack compiled into the kernel. It is
>> not a module, so I'm not able to unload it to disable connection
>> tracking. Is it possible to do it in another way without building my own
>> kernel?

Re: How to completely disable conntrack?

[nany]

Pascal Hambourg <pascal.mail <at> plouf.fr.eu.org> writes:

> 
> Hello,
> 
> Pandu Poluan a écrit :
> > I'm sure there's a sysctl knob, but off the top of my head:
> > 
> > -t raw -A PREROUTING -j NOTRACK
> 
> 
-t raw -A OUTPUT -j NOTRACK

hey man i applied above rules, its not working, 

the connections shows in /proc/net/ip_conntrack

is any one can tell how to disable connection tracking completely,

please help me man

Re: How to completely disable conntrack?

[Oskar Berggren]

Unload the module.

/Oskar


2011/7/13 nany <naveen.sadanand@gmail.com>:
> Pascal Hambourg <pascal.mail <at> plouf.fr.eu.org> writes:
>
>>
>> Hello,
>>
>> Pandu Poluan a écrit :
>> > I'm sure there's a sysctl knob, but off the top of my head:
>> >
>> > -t raw -A PREROUTING -j NOTRACK
>>
>>
> -t raw -A OUTPUT -j NOTRACK
>
> hey man i applied above rules, its not working,
>
> the connections shows in /proc/net/ip_conntrack
>
> is any one can tell how to disable connection tracking completely,
>
> please help me man
>
>
>
>
> --
> To unsubscribe from this list: send the line "unsubscribe netfilter" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html
>

Re: How to completely disable conntrack?

[Jan Engelhardt]

On Wednesday 2011-07-13 10:07, Oskar Berggren wrote:

>>>> I'm sure there's a sysctl knob, but off the top of my head:
>>>>
>>>> -t raw -A PREROUTING -j NOTRACK
>>
>> -t raw -A OUTPUT -j NOTRACK

-t raw -A PREROUTING (or OUTPUT depending on which you want) -j CT --notrack

>> hey man i applied above rules, its not working,

It certainly does work.

>> the connections shows in /proc/net/ip_conntrack

Of course - because you only disabled it for new packets. Old CTs
live on until they are cleared.

>> is any one can tell how to disable connection tracking completely,
>>
>> please help me man

["yo man" this ain't the hood, ya dig.]

>Unload the module.

That won't work if it is locked by iptables rules, though.

OFF: Re: How to completely disable conntrack?

[Gáspár Lajos]

< OFF >
>>> is any one can tell how to disable connection tracking completely,
>>>
>>> please help me man
> ["yo man" this ain't the hood, ya dig.]

MEGALOL !!! :D

< /OFF >

Swifty