Excluding IP from connection tracking
Hi,
Is there a way to exclude destination IPs from connection tracking? Right now if I enable connection tracking in general on our router after about 30 seconds the connection table fills up. 99% of the traffic is hitting a specific IP and I would like to keep the connection tracking itself available for everything else but disable it for that IP only so the connection table stops getting filled up.
Regards,
Dennis
Quoted 11 lines · Dennis J.
Hi,
Is there a way to exclude destination IPs from connection tracking? Right now if I enable connection tracking in general on our router after about 30 seconds the connection table fills up. 99% of the traffic is hitting a specific IP and I would like to keep the connection tracking itself available for everything else but disable it for that IP only so the connection table stops getting filled up.Regards,
Dennis
--
Hi Dennis,
see -t raw -j NOTRACK.
Regards,
Signature · 1 line
Martin Millnert <[email protected]>
Hello,
Quoted 2 lines · Martin Millnert
see -t raw -j NOTRACK.
And make sure NOTRACK is applied to packets in both directions, i.e with that address as either source or destination.