Change from --syn (old Style) to stat NEW

Markus Feldmann <feldmann_markus@xxxxxx> · Fri, 14 May 2010 14:27:10 +0200

Hi All,

i am thinking about changing much of my firewall rules from the old 
style with the <--syn> argument to the new style with the <-m state 
--state NEW> or to the conntrack style.

For example have a look line 221 to 239 in my firewall 
http://pastebin.com/cG0Vc4EW

These are my FTP rules. Therefore i am only using the <! --syn> 
arguments. Is it useful to remove this argument by inserting <-m 
conntrack ! --cstate NEW> to get more safety ?

regards Markus

--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html