From mboxrd@z Thu Jan 1 00:00:00 1970 From: Jeff Jensen Subject: Re: Help with ftp helper please Date: Sun, 25 Apr 2010 06:00:26 -0600 Message-ID: References: <4BD3E5F3.4070907@chello.at> Mime-Version: 1.0 Return-path: In-Reply-To: Sender: netfilter-owner@vger.kernel.org List-ID: Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit To: netfilter@vger.kernel.org Cc: Jan Engelhardt Interesting, unless I'm blind the original conversation does not mention this. I've seen -m state and now -m helper. Where did this -m conntrack come from? > > That's why one should always have -m conntrack --ctstate ESTABLISHED(,RELATED) > in INPUT, FORWARD, and OUTPUT. It really trims down all these rules. >