Re: Question on raw table and match state

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Feb 11, 2011 at 14:46, Pandu Poluan <pandu@xxxxxxxxxxx> wrote:
> I am wondering if the following rule will work:
>
> iptables -t raw -A PREROUTING -p icmp -m state --state
> RELATED,ESTABLISHED -j ACCEPT
>

Okay, to answer my own question: It won't work.

Method:

iptables -t raw -A PREROUTING -p icmp -m state --state
RELATED,ESTABLISHED -j LOG \
--log-prefix "RP ICMP MATCH:"
ping 192.168.1.1

(4 or 5 pings, then ^C)

dmesg

No log entries.

I did that right, didn't I?

Rgds,
--
Pandu E Poluan
~ IT Optimizer ~
Visit my Blog: http://pepoluan.posterous.com
Google Talk:    pepoluan
Y! messenger: pepoluan
MSN / Live:      pepoluan@xxxxxxxxxxx (do not send email here)
Skype:            pepoluan
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux