Messages in this thread | | | Date | Mon, 26 Dec 2005 22:07:14 -0800 | From | Phil Oester <> | Subject | Re: Linux 2.6.14.5 |
| |
On Tue, Dec 27, 2005 at 06:45:19AM +0100, Willy Tarreau wrote: > On Tue, Dec 27, 2005 at 04:42:00PM +1100, Grant Coady wrote: > > + iptables -A INPUT -p all --match state --state ESTABLISHED,RELATED -j ACCEPT > > iptables: No chain/target/match by that name > > So it's not only the NEW state, it's every "--match state".
Odd...works fine here
# uname -r 2.6.14.5 # iptables -nL | grep state ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED DROP all -- 0.0.0.0/0 0.0.0.0/0 state INVALID logdrop tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED DROP all -- 0.0.0.0/0 0.0.0.0/0 state INVALID
Phil - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |