[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: iptables and INVALID packet filtering.


So, it is better to use state module instead of conntrack,
when it comes to filter INVALID packets or it does not
matter, which module will be in use? What is your
opinion on this?
I'm wondering why there is so much entries about INVALID
packets in log files. Frankly, after - let say - 6, 7 hour of
computer use, there are about 40-50 logged events. Maybe
more. I don't know if it is something wrong.

I know, that in e.g. iptables v1.4.16.3, state module is obsolete.
But this is just an example;

WARNING: The state match is obsolete. Use conntrack instead.

This module was available in iptables v1.4.13. Of course,
if I remember correctly.

Best regards Matthew.

Reply to: