On Sat, 2003-11-15 at 10:07, Pavel V. Yanchenko wrote: > Hello. > > As far as I understand, rules in PRE- and POSTROUTING chains are > cached? Because when I delete a rule with SNAT target for ip > 192.168.10.10 this address's packets are still SNATed for several > minutes. The same thing happens for rules in PREROUTING chains. Isn't it the connection tracking table that's cached and NOT the rules? Active connections need to timeout first. > Is it possible to disable this feature? Maybe there is some file in > /proc where cached rules are listed? > > Thanks in advance. -- -- Raymond Leach <raymondl@xxxxxxxxxxxxxxxxxxxxxx> Network Support Specialist http://www.knowledgefactory.co.za "lynx -source http://www.rchq.co.za/raymondl.asc | gpg --import" Key fingerprint = 7209 A695 9EE0 E971 A9AD 00EE 8757 EE47 F06F FB28 --
Attachment:
signature.asc
Description: This is a digitally signed message part
