How to flush the connection state if conntrack is build in the kernel

Linux Netfilter discussions
 help / color / mirror / Atom feed

* How to flush the connection state if conntrack is build in the kernel
@ 2005-01-16 23:38 Vincent
  2005-01-17  2:54 ` Tobias DiPasquale
  0 siblings, 1 reply; 2+ messages in thread
From: Vincent @ 2005-01-16 23:38 UTC (permalink / raw)
  To: iptables

Hello,

If I build the iptables connection tracking into kernel. How can I flush
the connection state clean.

My enviroment
Linux 2.4.25
Iptables 1.2.11

Vincent






^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: How to flush the connection state if conntrack is build in the kernel
  2005-01-16 23:38 How to flush the connection state if conntrack is build in the kernel Vincent
@ 2005-01-17  2:54 ` Tobias DiPasquale
  0 siblings, 0 replies; 2+ messages in thread
From: Tobias DiPasquale @ 2005-01-17  2:54 UTC (permalink / raw)
  To: Vincent; +Cc: iptables

On Mon, 17 Jan 2005 07:38:54 +0800, Vincent <cs83152@csie.chu.edu.tw> wrote:
> If I build the iptables connection tracking into kernel. How can I flush
> the connection state clean.

Without ctnetlink from patch-o-matic in the kernel, you can't. Install
ctnetlink from patch-o-matic and you will be able to write a program
that can delete individual conntrack records with netlink messages.

-- 
[ Tobias DiPasquale ]
0x636f6465736c696e67657240676d61696c2e636f6d


^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2005-01-17  2:54 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2005-01-16 23:38 How to flush the connection state if conntrack is build in the kernel Vincent
2005-01-17  2:54 ` Tobias DiPasquale

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox