On Saturday 2011-05-14 18:29, Andrew Beverley wrote: >On Sat, 2011-05-14 at 14:36 +0100, Ed W wrote: > >Okay, I've played around with this myself using a similar scenario. It >looks to me like the packets *are* making it into the conntrack system. > >I tried setting a LOG target to match those packets with a ctstate of >RELATED: > >iptables -A INPUT -p ICMP -m conntrack --ctstate RELATED -j LOG > >And they were indeed logged. But there was no visibility of them using >the conntrack userspace program. Does `conntrack -L` show anything for you at all? There is/was a short intermediate time when it would not return anything. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
