On Tue, Sep 16, 2003 at 03:54:08PM +0200, Ray Leach wrote: > > > Yeah, connection tracking automagically implies state inspection. > > > > OK. Thanks for the informative comments but can you lay out the steps to > > prevent stateful inspection? For example, how to unload "ip_conntrack" and > > to prevent it from being reloaded again? > > > Personally, I would re-compile the kernel without connection tracking > support. OK. If you recompile without conntrack, can you do NAT? I'm just wondering? Thanks again. Ramin