* Martin Schiøtz wrote: > > > Can iptables do state transfer between two firewalls for failover > > > purpose. Something like PF sync with PF in BSD. > > > > > > I want to do NAT with failover. > > > > > > > Try conntrack-tools > > http://people.netfilter.org/pablo/conntrack-tools/ Out of curiosity ... Is there somethink that can replicate rule changes, too? thanks --lars