[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: OpenVPN and IP Forwarding



On Thu, 17 Jan 2013 08:01:06 +0000
Bonno Bloksma <b.bloksma@tio.nl> wrote:

>
> 
> KEEPSTATE=" -m state --state ESTABLISHED,RELATED"
> # Accept return traffic.
> $IPTABLES -A FORWARD -j ACCEPT $KEEPSTATE
> $IPTABLES -A INPUT -j ACCEPT $KEEPSTATE

Entirely unrelated to anything else in the thread, but this one caught
me yesterday, moving a firewall script from an old Ubuntu to a Sid
machine.

In Sid, 'state' no longer works. Instead of:

-m state --state

it is now:

-m conntrack --ctstate

I don't know when the change was made, or whether this is true of
Wheezy, as I don't have one.

-- 
Joe


Reply to: