Hi, thanks for the fast answer... On Thu November 13 2008, Thomas Jacob wrote: > For ICMP packets, I think icmp_new in nf_conntrack_proto_icmp.c doesn't > allow an echo request for the creation of a new conntrack, but I'm not > so sure. That's true, it checks, if the type of the ICMP is one of valid_new (containing ECHO, TIMESTAMP, INFO_REQUEST and ADDRESS) -- Christoph Paasch www.rollerbulls.be -- -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
