Will --state NEW,ESTABLISHED,RELATED matches everything?

Ian Mortimer ian@physics.uq.edu.au
Tue, 17 Jul 2001 08:42:19 +1000


> Are there any differences between
> 
> iptables -A FORWARD -p tcp -i ppp0 --dport 80 \
> 	-m state --state NEW,ESTABLISHED,RELATED -j ACCEPT
> 
> and
> 
> iptables -A FORWARD -p tcp -i ppp0 --dport 80 -j ACCEPT

The first won't match INVALID but the second will.