>On Wednesday 2008-04-09 00:01, Minh Cao wrote: >>Hi, >>Is that matter if I placed the options/extensions ( -m >>and -p ) in different orders ? > >No, but it matters between multiple -m. On Wednesday 2008-04-09 11:23, Ukeme Noah wrote: >Howdy, >The last two, the ones using the state machine might give you problems if >you use only those without specifying to allow established ssh connections. > >So, I'd suggest you add ,ESTABLISHED right after NEW to make the line Adding random states to rules of which you do not have the context is unlikely to be fruitful. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
