![]() | |||||||||||||
Messages in this thread |
On Mon, 26 Dec 2005 22:07:14 -0800, Phil Oester <kernel@linuxace.com> wrote: >On Tue, Dec 27, 2005 at 06:45:19AM +0100, Willy Tarreau wrote: >> On Tue, Dec 27, 2005 at 04:42:00PM +1100, Grant Coady wrote: >> > + iptables -A INPUT -p all --match state --state ESTABLISHED,RELATED -j ACCEPT >> > iptables: No chain/target/match by that name >> >> So it's not only the NEW state, it's every "--match state". > >Odd...works fine here > ># uname -r >2.6.14.5 ># iptables -nL | grep state >ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED >DROP all -- 0.0.0.0/0 0.0.0.0/0 state INVALID >logdrop tcp -- 0.0.0.0/0 0.0.0.0/0 tcp flags:!0x17/0x02 state NEW >ACCEPT all -- 0.0.0.0/0 0.0.0.0/0 state RELATED,ESTABLISHED >DROP all -- 0.0.0.0/0 0.0.0.0/0 state INVALID Oops, my apologies to all, just rebuilt kernel again (third time) from scratch, using the working .config from 2.6.14.4 -- I do not know how I muffed the .config twice in a row on one box without stuffing up the seven other boxen I built/tested 2.6.14.5 on :( Can copying a working 2.6.15-rc7 .config to 2.6.14.5, then make oldconfig do this? Grant. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/ | ||||||||||||
| Last update: 2005-12-27 07:53 [from the cache] ©2003-2008 | |||||||||||||