Hy i'm trying to add a rule in firewall but i receive this error: iptables v1.4.2: conntrack: Bad value for "--expires" option: "1:1000" Try `iptables -h' or 'iptables --help' for more information. iptables v1.4.2: conntrack: Bad value for "--expires" option: "1:1000" Try `iptables -h' or 'iptables --help' for more information. The lines that i want to add are: $IPTABLES -A RST_LOOP_OUT -d $IP_LOOP -p tcp --sport $PORT_LOOP --tcp-flags ALL PSH,ACK -m conntrack --ctexpire 1:1000 -j REJECT --reject-with tcp-reset $IPTABLES -A RST_LOOP_OUT -d $IP_LOOP -p tcp --sport $PORT_LOOP --tcp-flags ALL FIN,PSH,ACK -j REJECT -m conntrack --ctexpire 1:1000 --reject-with tcp-reset If i give a single value to --ctexpire it works (ex: --ctexpire 1 ) I've searched on google a lot of days but without any result. could you help me? Thank's -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
