On Fri, 14 Oct 2011, Torsten Bitterlich wrote: > I would like to know if there are any restrictions to connection > tracking when ipsets are used. Can netfilter still properly track > connections for NAT-ed and MASQUERADE-d connections? Connection tracking is independent from ipset. There's no relation or dependency between them. Why do you ask it? Best regards, Jozsef - E-mail : kadlec@xxxxxxxxxxxxxxxxx, kadlec@xxxxxxxxxxxx PGP key : http://www.kfki.hu/~kadlec/pgp_public_key.txt Address : KFKI Research Institute for Particle and Nuclear Physics H-1525 Budapest 114, POB. 49, Hungary -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html