2.6.12: connection tracking broken?

Harald Welte laforge at netfilter.org
Mon Jun 20 09:19:17 CEST 2005


On Sat, Jun 18, 2005 at 04:57:49PM +0200, Jan Engelhardt wrote:
> You forget about INPUT and OUTPUT. If you drop everything in INPUT, there's 
> nothing to FORWARD.

he was talking about iptables, not ipchains.

-- 
- Harald Welte <laforge at netfilter.org>                 http://netfilter.org/
============================================================================
  "Fragmentation is like classful addressing -- an interesting early
   architectural error that shows how much experimentation was going
   on while IP was being designed."                    -- Paul Vixie
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : /pipermail/netfilter-devel/attachments/20050620/0d3da23d/attachment.bin


More information about the netfilter-devel mailing list