> My question is: > How many state tables are used? one table for each main chain? > One for INPUT and one for OUTPUT? The STATE is maintained by the ip_conntrack module. It uses one big list to maintain the current state of all active sessions through the system. Run cat /proc/net/ip_conntrack to see the human readable version of this list.
