于 2011年11月25日 11:41, lu zhongda 写道: > However other rule in /etc/sysconfig/iptables did logged file, log found in /var/log/iptables.log > -A INPUT -p tcp -m tcp --dport 9999 -j LOG --log-prefix "ACCEPT 9999::" hi zhongda. Because -m state is based on the ip_conntrack.when ip_conntrack destroy,the -m state will never match. -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
