[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: 回覆: Re: Ipv6 firewall in Sarge - iptabl e?=



Op vr, 28-10-2005 te 16:52 +0800, schreef kmlhk79-ipv6@yahoo.com.hk:
> Dear Dominic :
> 
> What do you means for "stateful filtering" ?

"stateful filtering" means running a firewall that keeps state. It's as
simple as that.

In iptables terms, ip6tables does not support things like 

iptables -m state --state RELATED,ESTABLISHED -j ACCEPT

instead, you have to do things with --syn, much like was the case in
ipchains for 2.2.

-- 
The amount of time between slipping on the peel and landing on the
pavement is precisely one bananosecond



Reply to: