On Saturday 2011-05-28 00:31, Erik Schorr wrote: > On 5/27/2011 8:58 AM, Jan Engelhardt wrote: >> Though these dates,-m conntrack --ctstate ESTABLISHED,RELATED is used. > > Is there a practical, performance, or functional difference between using -m > state and -m conntrack? It has many more checks available; perhaps the second most handy (to me, at least) one after the usual EST/REL clause is --ctstate DNAT. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
