Messages in this thread |  | | Date | Wed, 10 Oct 2001 01:02:45 +0200 (CEST) | From | Luigi Genoni <> | Subject | Re: iptables in 2.4.10, 2.4.11pre6 problems |
| |
and what is the content of /proc/net/ip_conntrack file?
how big is the buffer you are using for packet tracing? (/proc/sys/net/ipv4/ip_conntrack_max)
On 9 Oct 2001, Trever L. Adams wrote:
> On Tue, 2001-10-09 at 18:46, Luigi Genoni wrote: > > stupid question... > > have you got a rule like > > > > iptables -A INPUT -m unclean -j DROP > > > > enabled? > > I do not know what unclean means, so I don't know. > > I have one that only accepts NEW from the inside. > I have one that accepts all ESTABLISHED,RELATED. > I have one that drops NEW,INVALID from ppp0 (outside world). > > Trever > > > _________________________________________________________ > Do You Yahoo!? > Get your free @yahoo.com address at http://mail.yahoo.com >
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|  |