On Wednesday 2008-10-01 16:06, Christoph Paasch wrote: > >I would like to know, that if I have a filter like the one shown below >(allowing outgoing connections of every protocol-type), does netfilter stores >in the state of the established outgoing connection also the protocol which >established the connection? (TCP, UDP, ....) Or does it opens the connection >for any protocol? > >iptables -A FORWARD -i eth0 --ctstate NEW, RELATED, ESTABLISHED -j ACCEPT Read the really-really-really-nice manpage (which has gotten so much care from me). I mean, hey, it's directly below --ctstate! :-) [!] --ctproto l4proto Layer-4 protocol to match (by number or name) -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html