On Mon, 3 Oct 2005, Henrik Nordstrom wrote: > > How is this association known to conntrack? > > By a application protocol helper module registering an expectation of a > related connection. > > The manual is actually slightly incorrect. ICMP errors normally gets > sorted as ESTABLISHED, not RELATED. According to the source code the manual is correct and ICMP error messages are always RELATED (or INVALID). Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary