> Quotes from the iptables tutorial : > > "The conntrack match is an extended version of the state match" > > You can use more specific options with the conntrack match. > Both rules do the same thing. OK. Thank You -- Best regards