ipchains - priznak established

[Jan Kasprzak]

Petr Tomasek wrote:
: On 24 Oct 2000, David Rohleder wrote:
: 
: >pkincl na synergy-vs.cz (Petr Kincl) writes:
: >
: >> Dobry den.
: >> Je mozno nejak nakonfigurovat ipchains tak, aby si pamatoval
: >> otevrene sesions zevnitr a nekontrolovat je pri navratu zpet? Na
: >> Ciscu se to da zaridit priznakem established. Mate nekdo s timto
: >> zkusenosti?
: >
: >Stejne jako na ciscu, se nikde nic nepamatuje a kontroluje se
: >nastaveni flagu SYN, (ACK a RST nulove)  ( ipchains -y)
: >
: 
: Tusim, ze by nekde mel byt nejaky patch pro linux, ktery by
: si to umel pamatovat. (Jestli se nepletu, tak by to
: iptables, co budou v 2.4.0, by to meli taky nejak umet)
: 
	Ve 2.4 iptables, modul ip_conntrack.o (a ip_conntrack_ftp.o).
Ma nove paramtery NEW, RELATED, ESTABLISHED.

-Yenya

-- 
\ Jan "Yenya" Kasprzak <kas at fi.muni.cz>       http://www.fi.muni.cz/~kas/
\\ PGP: finger kas at aisa.fi.muni.cz   0D99A7FB206605D7 8B35FCDE05B18A5E //
\\\             Czech Linux Homepage:  http://www.linux.cz/              ///
 Its purely bandwidth.  If it was 40 instances of Miguel reading web pages
flat out over 100baseT you would definitely be right. But its not...  (Alan)