On Mon, 2004-11-22 at 04:25, Jochen Vogel wrote: > in the past i thought the state NEW is the state of the connection viz only > SYN packets > and not if i write it to conntrack table. there is no part of "-m state --state NEW" that looks at TCP flags. -j -- "Beer. Now there's a temporary solution." --The Simpsons