-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 > States for --ctstate: > > INVALID > The packet is associated with no known connection. > > NEW The packet has started a new connection or otherwise associated with a connection which has not seen packets in both directions. > > ESTABLISHED > The packet is associated with a connection which has seen packets in both directions. > > RELATED > The packet is starting a new connection, but is associated with an existing connection, such as an FTP data transfer or an ICMP error. > > UNTRACKED > The packet is not tracked at all, which happens if you explicitly untrack it by using -j CT --notrack in the raw table. > > SNAT A virtual state, matching if the original source address differs from the reply destination. > > DNAT A virtual state, matching if the original destination differs from the reply source. - -- Mit freundlichen Grüßen/Kind Regards, Noel Kuntze GPG Key ID: 0x63EC6658 Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658 A quote from the man page -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 iQIcBAEBCAAGBQJWbCQUAAoJEDg5KY9j7GZYA2YQAJARyzxFzaYyaFWmYnLFnLTN TkCAfWqBCIz1ibQs2ajuIIVypslyRjSd8cLKT4x+VMGgT2gUv6uBLW3hZ/Kysui1 mKtYWk+Tiy/XStgHhjStUY86ImXadl11jX5P2aj+Ogr1pV96GJzCk/lCNjsEpqXQ Sk3LS7U4EfTODWMRclnnjWcjuN5EQxLbdtoGM1Q0u8XmbwtQtnPoqtVfK4DSp8ny Fv7/JabOJtZ+Ej5iiQOySXn8AOJOAqN5inWG5TQylsDkk65IfhCDsedHUoBd+kL4 3Ej59+bIYcpGYtpQTmAjTrV37+cDCxg49ms/gNSN4w4UeFFmZ8Tk/CHN3Kl0TncD yBqEE3KyL6DkbjWpUkUx0uCtTAztj3R1nkbGQKthrnGWF6sedWlan9EgVC+qmolC aG42OjpkjfRjbP15TR3srdj3SrYv5NeXqS5o07pTjxKUJNl6jFqICX9qSOq/LJ0M LGdCvqmJx021MNW8GzUEGYcStViF2goMolxA8DXG/Qp3j7GSR3GlU89JRDE1fMj6 +vch/+QfoO08op5+r35/poFciwtQSpdND5yWFGyXiNNpOu4l16wfto+fUhjkXdgF wL4B8J4RzdmXijbvr1GqJoTdG+dQIyg9d8g9wo83otB9NEOVzFNJjynFN0vhpN6+ J8coUqcCgB+b5NsMMkDj =pDL1 -----END PGP SIGNATURE----- -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html