![]() | |||||||||||||
Messages in this thread |
On Tue, Dec 27, 2005 at 06:45:19AM +0100, Willy Tarreau wrote: > On Tue, Dec 27, 2005 at 04:42:00PM +1100, Grant Coady wrote: > > + iptables -A INPUT -p all --match state --state ESTABLISHED,RELATED -j ACCEPT > > iptables: No chain/target/match by that name > > So it's not only the NEW state, it's every "--match state". Odd...works fine here # uname -r 2.6.14.5 # iptables -nL | grep state ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED DROP all -- 0.0.0.0/0 0.0.0.0/0 state INVALID logdrop tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED DROP all -- 0.0.0.0/0 0.0.0.0/0 state INVALID Phil - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ | ||||||||||||
| Last update: 2005-12-27 07:11 [from the cache] ©2003-2008 | |||||||||||||