Re: Actually Using Conntrack?

[Mart Frauenlob <mart.frauenlob@chello.at>]

On 26.01.2013 18:28, David Baron wrote:
> I still get that (harmless) string of warnings to use conntrack instead
> of the current, obsolete "state match." I have conntract installed. So
> how do I use it?

This refers to the match extension 'conntrack' vs 'state' of iptables.
Use it like this: -m conntrack --ctstate [INVALID|ESTABLISHED|NEW|...]

The warnings will go away in future iptables releases, because the state 
match will not be dropped, but aliased to use conntrack internally 
(recent discussion on netfilter mailing lists).

[...]