Re: packet filter rules updating

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 06/01/2006 01:56 AM, moniacheli@xxxxxxxxxx wrote:
> Is there some iptables options that I have to give to force the rules 
> updating?

No, the problem is that NAT rules are only used for the first packet
in a connection, and the conntrack table entry hasn't timed out.

You can delete the entry using the conntrack tool (requires a recent
kernel and you may need to get the conntrack tool source from svn.)


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux